chore: pin all floating image tags to exact running versions

- vaultwarden/server:latest → 1.35.4
- redis:alpine → 8.6.2-alpine (authentik)
- homarr-labs/homarr:latest → 1.0.0
- gitea/gitea:latest → 1.25.5
- uptime-kuma:1 → 1.23.17

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

authentik/deployment-authentik-redis.yaml

@@ -33,7 +33,7 @@ spec:
         - '1'
         - --loglevel
         - warning
-        image: redis:alpine
+        image: redis:8.6.2-alpine
         imagePullPolicy: IfNotPresent
         name: redis
         ports:

gitea/statefulset-gitea.yaml

@@ -41,7 +41,7 @@ spec:
           value: '1000'
         - name: USER_GID
           value: '1000'
-        image: gitea/gitea:latest
+        image: gitea/gitea:1.25.5
         imagePullPolicy: Always
         name: gitea
         ports:

homarr/deployment-homarr.yaml

@@ -45,7 +45,7 @@ spec:
           value: Authentik
         - name: AUTH_OIDC_AUTO_LOGIN
           value: 'true'
-        image: ghcr.io/homarr-labs/homarr:latest
+        image: ghcr.io/homarr-labs/homarr:1.0.0
         imagePullPolicy: Always
         name: homarr
         ports:

monitoring/deployment-uptime-kuma.yaml

@@ -28,7 +28,7 @@ spec:
         app: uptime-kuma
     spec:
       containers:
-      - image: louislam/uptime-kuma:1
+      - image: louislam/uptime-kuma:1.23.17
         imagePullPolicy: IfNotPresent
         name: uptime-kuma
         ports:

vaultwarden/deployment-vaultwarden.yaml

@@ -34,7 +34,7 @@ spec:
         envFrom:
         - secretRef:
             name: vaultwarden-secret
-        image: vaultwarden/server:latest
+        image: vaultwarden/server:1.35.4
         imagePullPolicy: Always
         name: vaultwarden
         ports: