Update ghcr.io/pocket-id/pocket-id Docker tag to v2.9.0 (#4)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.8.0` → `v2.9.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.9.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v290)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0)

##### Bug Fixes

- issues with loading new font ([#&#8203;1496](https://github.com/pocket-id/pocket-id/pull/1496) by [@&#8203;MelvinSnijders](https://github.com/MelvinSnijders))
- PAR parameters not respected by authorize page ([3d9d4de](3d9d4de619) by [@&#8203;stonith404](https://github.com/stonith404))
- add responsive css for api/user/group/client page add buttons ([#&#8203;1508](https://github.com/pocket-id/pocket-id/pull/1508) by [@&#8203;James18232](https://github.com/James18232))
- load Gloock font from static path instead of inline ([89b4abb](89b4abb8b5) by [@&#8203;stonith404](https://github.com/stonith404))
- update terminology from public key code exchange to proof key co… ([#&#8203;1515](https://github.com/pocket-id/pocket-id/pull/1515) by [@&#8203;maxwassiljew](https://github.com/maxwassiljew))
- callback URL validation not validated if prompt=none ([8a75774](8a75774971) by [@&#8203;stonith404](https://github.com/stonith404))
- passkey card not rounded ([84678c3](84678c3a7b) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- add AI Usage Policy to CONTRIBUTING.md ([fea933b](fea933b62d) by [@&#8203;stonith404](https://github.com/stonith404))
- add PR template ([bf9f76b](bf9f76bbd5) by [@&#8203;stonith404](https://github.com/stonith404))
- add "needs more upvotes" label as default ([fc42f62](fc42f6211d) by [@&#8203;stonith404](https://github.com/stonith404))
- fix link to watchtower repo ([#&#8203;1500](https://github.com/pocket-id/pocket-id/pull/1500) by [@&#8203;wollew](https://github.com/wollew))

##### Features

- add support for Pushed Authorization Requests (RFC9126) ([#&#8203;1404](https://github.com/pocket-id/pocket-id/pull/1404) by [@&#8203;Zenithar](https://github.com/Zenithar))

##### Other

- fix linter issues ([4f97cd4](4f97cd4188) by [@&#8203;stonith404](https://github.com/stonith404))
- update AAGUIDs ([#&#8203;1511](https://github.com/pocket-id/pocket-id/pull/1511) by [@&#8203;github-actions](https://github.com/github-actions)\[bot])
- run svelte check and unit tests in breaking branches ([83b45f6](83b45f682d) by [@&#8203;stonith404](https://github.com/stonith404))
- run formatter ([2726ddd](2726ddd0c2) by [@&#8203;stonith404](https://github.com/stonith404))
- bump vite from 8.0.13 to 8.0.16 ([#&#8203;1521](https://github.com/pocket-id/pocket-id/pull/1521) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- npm dependabot not run from root ([c0d96a0](c0d96a0b13) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong assertion ([effd2a1](effd2a146f) by [@&#8203;stonith404](https://github.com/stonith404))
- Bump the "all-dependencies" group with 4 updates across multiple ecosystems ([#&#8203;1523](https://github.com/pocket-id/pocket-id/pull/1523) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #4
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>

modules/pocket-id.nix

@@ -17,7 +17,7 @@ in {
   config = lib.mkIf cfg.enable {
     virtualisation.oci-containers.containers = {
       pocket-id = {
-        image = "ghcr.io/pocket-id/pocket-id:v2.8.0@sha256:a073640418b2cfc8587c488a7270580b3ab95cae2c543f5d64bbbe1fd7ccbae8";
+        image = "ghcr.io/pocket-id/pocket-id:v2.9.0@sha256:a2a38a96699d7483d65b5849b015d954f294938306a03a9c0699bc5b79554e86";
         autoStart = true;
         networks = [
           "traefik"