agent-platform release v4.142.1

Changed

• The Substrate workers run the release the control plane runs (giantswarm/agent-platform#822). The chart sets ateController.gvisorWorker.followRelease: true on the substrate release, so a Substrate patch within components.substrate.versionRange rolls the kagent worker pool with the atelet, with no chart release. The range is the one source of the Substrate version; the WorkerPool’s spec.workerImage stays the floor’s. An own followRelease: false fails the render. make verify-worker-image renders the substrate chart the range resolves to and fails when its ate-controller would run the workers on another release than its atelet.