xactfetch: Provide Vaultwarden password for sync

Vaultwarden has started prompting for the master password occasionally
when syncing the vault.  Thus, we need to make sure it is available in
the _sync_ container, by mounting the secret and providing the
`PINENTRY_PASSWORD_FILE` environment variable.

xactfetch/xactfetch.yaml

@@ -38,12 +38,18 @@ spec:
             command:
             - rbw
             - sync
+            envFrom:
+            - configMapRef:
+                name: xactfetch
             securityContext:
               readOnlyRootFilesystem: true
             volumeMounts:
             - mountPath: /etc/rbw
               name: xactfetch-rbw
               readOnly: true
+            - mountPath: /run/secrets/xactfetch
+              name: xactfetch-secrets
+              readOnly: true
             - mountPath: /tmp
               name: tmp
               subPath: tmp
@@ -71,6 +77,8 @@ spec:
             - mountPath: /var/lib/xactfetch
               name: xactfetch-data
               subPath: data
+          nodeSelector:
+            kubernetes.io/arch: amd64
           securityContext:
             fsGroup: 2468
             runAsNonRoot: true