agent-platform release v4.128.0

(workspaces) Connectivity creates the grant signing key Secret in #940 by @teemow
(substrate) Follow Substrate 1.8.1, snapshots migrate on the roll in #943 by @teemow
(workspaces) Default workspace-manager’s kagent address in #948 by @teemow
(substrate) Floor Substrate at 1.8.2-rc.5, golden and resume retry in #949 by @teemow
(kagent) Follow kagent 1.10.0, Sessions set up on workspace volumes in #951 by @teemow
(workspaces) Kagent’s session admission from the switch in #955 by @teemow
(workspaces) A CSI companion for EFS and Azure Files in #956 by @teemow
(agent-manager) Floor at 1.12.0, start_session with a workspace grant in #962 by @teemow
(klaus-gateway) Derive workspaces.toolsPrefix while workspaces are on in #967 by @teemow
(agent-manager) Floor at 1.13.0, start_session without a message in #968 by @teemow
(klaus-gateway) Floor at 4.3.0, Sessions through start_session in #971 by @teemow
(workspace-manager) Floor at 0.5.0 for the gitlab provider kind in #969 by @teemow

(connectivity) Create only the chart’s own grant key Secret in #945 by @teemow
(substrate) 15m HelmRelease timeout, stable 1.8.2 floor in #953 by @teemow
(workspace-manager) Floor at 0.4.0, which serves the JWKS in #954 by @teemow
(workspaces) Render the CSI companion’s exceptions from the meta chart in #959 by @teemow
(workspaces) The CSI companion’s Envoy as root, a numeric liveness port in #961 by @teemow
(workspaces) Admit the CSI companion’s proxy port on ate-api-server’s egress in #965 by @teemow

Full Changelog: https://github.com/giantswarm/agent-platform/compare/v4.127.1...v4.128.0