muster release v5.47.0

(credprovider) Audit every actor-JWT authentication as the bound person in #1594 by @QuentinBisson
(oauth) Render the browser sign-in pages with pagekit in #1593 by @marians
(mcpserver) Key servers by namespace and name; no identity outside muster’s namespace in #1508 by @fiunchinho
(credprovider) The git user per provider instance, oauth2 for GitLab in #1586 by @teemow
(oauth) Disconnecting a subject-scoped grant revokes it at the provider in #1599 by @teemow
(oauth) A tenant server’s sign-in stays in its namespace in #1598 by @fiunchinho
(aggregator) List MCP servers as the caller in #1601 by @fiunchinho
(aggregator) Relay MCP resource subscriptions per user (subscriptions/listen) in #1600 by @teemow

(agent) Show the sign-in’s outcome on the CLI callback page in #1596 by @marians

Full Changelog: https://github.com/giantswarm/muster/compare/v5.46.10...v5.47.0