Update ghcr.io/charlesthomas/bitwarden-cli Docker tag to v2026.10.1

ansible/requirements-python.txt

@@ -1,3 +1,3 @@
-ansible-core==2.22.0
+ansible-core==2.21.5
 proxmoxer==2.3.0
 requests==2.34.2

apps/infra/bitwarden-cli.yaml

@@ -60,7 +60,7 @@ spec:
         kubernetes.io/arch: amd64
       containers:
         - name: bitwarden-cli
-          image: ghcr.io/charlesthomas/bitwarden-cli:2026.8.0  # 2026.9.0 requires Vaultwarden's unimplemented user-key-ID backfill API
+          image: ghcr.io/charlesthomas/bitwarden-cli:2026.10.1  # 2026.9.0 requires Vaultwarden's unimplemented user-key-ID backfill API
           imagePullPolicy: IfNotPresent
           # Override the baked entrypoint so --disable-origin-protection is
           # actually passed (it was commented out in the image's entrypoint.sh,