xactfetch: Sync vault before running

The Bitwarden vault needs to be synced before *xactfetch* runs, in case
the password for a bank website has changed since it was first fetched.

xactfetch/xactfetch.yaml

@@ -33,6 +33,17 @@ spec:
               readOnlyRootFilesystem: true
               runAsGroup: 999
               runAsUser: 999
+          - name: sync
+            image: git.pyrocufflink.net/packages/xactfetch
+            command:
+            - rbw
+            - sync
+            securityContext:
+              readOnlyRootFilesystem: true
+            volumeMounts:
+            - mountPath: /var/lib/xactfetch
+              name: xactfetch-data
+              subPath: data
           containers:
           - name: xactfetch
             image: git.pyrocufflink.net/packages/xactfetch