agent-platform release v1.1.23

Update muster and muster-crds to v0.4.0 (via v0.3.14): muster now supports brokered RFC 8693 token exchange (giantswarm/muster#831) — external confidential clients can exchange a trusted-issuer subject token plus an audience parameter at /oauth/token for a token minted by the audience’s downstream Dex. New muster.oauth.server.tokenExchangeBroker values block (per-client audience allowlist, audience → downstream Dex target mapping); mcp-oauth bumped to v0.3.0. Inert by default.