How do I configure Portainer's GitOps features to authenticate to a Bitbucket repository?

When deploying a stack using a private Bitbucket repository, you need to create and use a Bitbucket “app password”, not a personal access token/API token. App passwords are a Bitbucket concept documented here: https://support.atlassian.com/bitbucket-cloud/docs/app-passwords/