The post-password-change hook is an async event that fires after the password reset event is triggered. It’s not able to mutate the user flow in any way.
I talked with @michael.wallen, product manager for user management, about this, and made him aware of this thread to comment further.