Add autoconfirm policy as an exception to zero knowledge

[eliykat]

🎟️ Tracking

Internal change

📔 Objective

Update Security Principle 01: Servers are zero knowledge to note the auto-confirm policy as an exception. This is already noted in our help documentation, but it's also relevant here because this says that it's a complete list of all exceptions.

📸 Screenshots

[github-actions]

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

This PR adds an "Automatic confirmation policy" section to the zero-knowledge security principle doc (01-servers-are-zero-knowledge.mdx), documenting it as a controlled exception. The new section follows the existing exception pattern (Key Connector, Icons service), uses correct heading capitalization and markdown link formatting, and accurately describes the security trade-off and its mitigations. No security, correctness, or breaking-change concerns were found.

Code Review Details

No actionable findings. This is a clean, documentation-only change consistent with the established structure and style of the surrounding content.