Pin the demo to terdut-server v0.49.1

Same reason as 93d2a00: the kind demo shows the current web UI, which now
includes the metrics graph. The demo has no Prometheus, so it sets no
allowedHosts and the graph stays off.

Claude-Session: https://claude.ai/code/session_016mBLURvJoMuUEr9cB2RpUN

examples/demo/01-server.yaml

@@ -15,7 +15,7 @@ spec:
   image:
     repository: git.ryuvia.com/niklas/terdut-server
     # v0.36.0 is the floor now that replicas below is 2 (this demo pins
-    # the current release, v0.48.0, so it shows the current web UI too): that
+    # the current release, v0.49.1, so it shows the current web UI too): that
     # release put the sweeper, the notifier and the migration runner each
     # behind a Postgres advisory lock, and gave incident creation its own
     # conflict resolution, which is what makes a second replica safe
@@ -24,7 +24,7 @@ spec:
     # can adopt/rotate a key on a team-scoped account it didn't just create
     # in the same call -- without which terdutteam-* can wedge permanently
     # on the crash-window race this demo hit live, niklas/terdut-operator#3.)
-    tag: v0.48.0
+    tag: v0.49.1
   # Matches this CRD's own spec.replicas default (v0.4.0) -- stated
   # explicitly, like every other field in this file, rather than left to
   # the default. RollingUpdate follows automatically; this operator does