agent-platform release v4.175.0

(organizations) Organizations-admin role and admission policies of organization namespaces in #1270 by @fiunchinho
(organizations) The operator’s access for the erasure of deleted organizations in #1271 by @fiunchinho
Air-gapped install from a mirror registry with credentials and CA in #1264 by @teemow
(organizations) Deploy agent-platform-operator, remove the tenants mode, select organization namespaces by the agent-platform label in #1272 by @fiunchinho
(organizations) Agent-platform:organization-flux and the pins of the operator’s Kustomizations in #1273 by @fiunchinho
Default ModelConfig annotation and kagent’s default ModelConfig switch in #1276 by @QuentinBisson
Agent-platform-operator trusts ate-api through the projected ClusterTrustBundle in #1282 by @QuentinBisson
(kagent) Take the 1.31 line, ListSessions filters by the Agent’s namespace in #1281 by @QuentinBisson
(agent-manager) Take the 2.19 line, which reports the namespace’s default model in #1288 by @QuentinBisson
(operator) Take agent-platform-operator 0.1.x in #1289 by @QuentinBisson
(substrate) Take Substrate 1.18 and the Google access-token plugin 0.3, whose Secret readers are bound by namespace in #1293 by @QuentinBisson
(kagent) Declare no model in the charts in #1295 by @QuentinBisson
(organizations) AgentPlatformOrganizations.enabled turns on agent-manager’s organization tools in #1298 by @QuentinBisson

(deps) Update gsoci.azurecr.io/giantswarm/agent-manager docker tag to v2.19.0 in #1266 by @renovate[bot]
(deps) Update gsoci.azurecr.io/giantswarm/oauth2-proxy docker tag to v7.15.6 in #1294 by @renovate[bot]
(deps) Update gsoci.azurecr.io/giantswarm/agent-manager docker tag to v2.20.3 in #1299 by @renovate[bot]

(muster) Trust the actor JWT whenever Substrate is on, not only with workspaces in #1284 by @QuentinBisson
(harness) Stop forwarding the person’s token to MCP servers in #1285 by @QuentinBisson
(tenants) A HelmRelease in the kagent namespace is an agent release in #1283 by @QuentinBisson
(substrate) The credential providers read Secrets only where an actor’s grant points in #1286 by @fiunchinho
(components) Drop the cluster-manager version ceiling in #1280 by @marians
(postgres) Allow ImageVolume mounts in restore workloads in #852 by @danielgaskins
(connectivity) Ask the authorizer once per distinct Secret in the credential policies in #1296 by @QuentinBisson

(hooks) The connectivity hooks read only the Secrets they write in #1275 by @QuentinBisson

Full Changelog: https://github.com/giantswarm/agent-platform/compare/v4.174.3...v4.175.0