KeepassXC goes from strength to strength...

As of Firefox 157 flatpak <-> flatpak just works without all the messing around (or will when they set widget.use-xdg-desktop-portal.native-messaging-proxy on by default and update flatpak permissions).