Security: - Move Vaultwarden ADMIN_TOKEN to Secret (was plaintext) - Remove root user execution from CodiMD (runAsUser: 0) - Use fixed image versions instead of latest tag Stability: - Add liveness/readiness probes to Vaultwarden, CodiMD, CodiMD DB - Add resource requests/limits to all services - Set appropriate memory/CPU constraints Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>