migrate bootstrap.sh from bw to bws, update docs

USECASES.md

@@ -11,8 +11,9 @@ bash /opt/hantim/scripts/bootstrap.sh
 ```
 
 **What happens:**
-- Installs all dependencies (jq, certbot, Node.js 20, Docker, bw CLI)
-- Fetches secrets from Bitwarden (registry token, deploy SSH key)
+- Installs all dependencies (jq, certbot, unzip, Docker)
+- Installs `bws` CLI, prompts for Bitwarden Secrets Manager access token
+- Fetches registry token and deploy SSH public key via `bws`
 - Logs into Docker registry
 - Creates deploy user with restricted SSH + sudo
 - Runs `configure.sh`:
@@ -22,7 +23,7 @@ bash /opt/hantim/scripts/bootstrap.sh
 
 **Prerequisites:**
 - DNS for all configured domains must point to the server
-- Bitwarden vault must contain: `hantim-ci-registry-push`, `hantim-server-deploy`
+- Bitwarden Secrets Manager access token for the `hantim-server` machine account
 - Docker images must exist in the Gitea registry (or apps will start on next push)
 
 ## 2. Restore from backup