Update ghcr.io/charlesthomas/bitwarden-cli Docker tag to v2026.10.1

apps/default/playwright.yaml

@@ -38,7 +38,7 @@ spec:
           env:
             - name: TZ
               value: America/Sao_Paulo
-          image: mcr.microsoft.com/playwright:v1.65.0-noble
+          image: mcr.microsoft.com/playwright:v1.64.1-noble
           name: playwright
           ports:
             - containerPort: 3000

apps/infra/bitwarden-cli.yaml

@@ -60,7 +60,7 @@ spec:
         kubernetes.io/arch: amd64
       containers:
         - name: bitwarden-cli
-          image: ghcr.io/charlesthomas/bitwarden-cli:2026.8.0  # 2026.9.0 requires Vaultwarden's unimplemented user-key-ID backfill API
+          image: ghcr.io/charlesthomas/bitwarden-cli:2026.10.1  # 2026.9.0 requires Vaultwarden's unimplemented user-key-ID backfill API
           imagePullPolicy: IfNotPresent
           # Override the baked entrypoint so --disable-origin-protection is
           # actually passed (it was commented out in the image's entrypoint.sh,