Fix required character class on unito.it password rule

Hyphens must be the first character of the class.
Closing square brackets must be the last character of the class.

quirks/password-rules.json

@@ -942,7 +942,7 @@
         "password-rules": "minlength: 14; required: digit; required: upper; required: lower; required: [-~!@#$%^&*_+=`|(){}:;];"
     },
     "unito.it": {
-        "password-rules": "minlength: 8; required: upper; required: lower; required: digit; required: [!?-+*/:;'\"{}[]()@£$%&=^#];"
+        "password-rules": "minlength: 8; required: upper; required: lower; required: digit; required: [-!?+*/:;'\"{}()@£$%&=^#[]];"
     },
     "user.ornl.gov": {
         "password-rules": "minlength: 8; maxlength: 30; max-consecutive: 3; required: lower, upper; required: digit; allowed: [!#$%./_];"