add BWS (#296)

## Description

Create a BWS specific container for jenkins usage.

---

## Checklist
Ensure your pull request meets the following requirements:

- [ ] Tests have been added or updated.
- [ ] Documentation has been updated (if applicable).
- [ ] I have applied neccessary labels to this PR.
- [ ] I have tested this change locally and on staging.
- [ ] At a functional level, it has been validated with the team/PO.

.github/workflows/ci.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        directories: ['jenkins', 'node18', 'node20', 'php8.1-cli', 'php8.2-cli', 'php8.3-cli', 'aws-cli', 'kamal', 'ansible']
+        directories: ['jenkins', 'node18', 'node20', 'php8.1-cli', 'php8.2-cli', 'php8.3-cli', 'aws-cli', 'kamal', 'ansible', 'bws']
     steps:
       - uses: docker/setup-qemu-action@v3
       - uses: docker/setup-buildx-action@v3

bws/Dockerfile

@@ -0,0 +1,22 @@
+FROM debian:trixie-slim
+
+ENV BITWARDEN_VERSION=1.0.0
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+    curl \
+    unzip \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* /usr/share/doc/*
+
+RUN ARCH=$(uname -m) && \
+    curl --insecure -Lo bws.zip https://github.com/bitwarden/sdk-sm/releases/download/bws-v${BITWARDEN_VERSION}/bws-${ARCH}-unknown-linux-gnu-${BITWARDEN_VERSION}.zip
+
+RUN unzip bws.zip -d /usr/local/bin
+RUN chmod +x /usr/local/bin/bws
+RUN rm bws.zip
+
+RUN groupadd --gid 1000 jenkins
+RUN useradd --uid 1000 --gid 1000 jenkins
+
+USER jenkins