agent-platform release v3.13.1

kagent.oauth2ProxyIngress is dropped from the values forwarded to the kagent chart (components.kagent.omitKeys). It is read by the connectivity chart only, and the flattened kagent 0.2.x chart rejects it (additional properties 'oauth2ProxyIngress' not allowed), so an installation that set it (glean) failed the kagent upgrade to 0.2.0. tests/verify-kagent-wiring.py now derives the umbrella-only keys from what the connectivity templates read under .Values.kagent, so a new one cannot be forwarded unnoticed.