Their penalties were good.
So are we out?
Yes. Finish third in the table.
No, we are second at worst. We would still finish top if Bristol City beat Tottenham in 90 minutes.
Only group winners progress.
BBC had us third on 4 points and Blues second on 5 when I looked.
BBC quite often seem to fuck up the tables for this and Scottish (Men's) League Cup which has the same points system.
You get:
3 points for a win
2 points for a win on penalties
1 point for a defeat on penalties
Villa and Tottenham are on five points, we are above them on goals scored (and will finish above them on goal difference if they lose in normal time).
If they even manage to take it to penalties, they're through and we are out.