agent-platform release v3.17.1

The kagent Namespace (kagent.namespaceOverride, when it differs from the release namespace) renders only while the kagent component is on — the last of the standalone generator’s nine template patches, landed upstream. An installation without kagent no longer gets an empty, Helm-owned kagent namespace, and turning kagent off removes it with the release. On a management cluster where kagent is off, the connectivity upgrade deletes the empty kagent namespace; the fleet’s hand-written kagent-flux identity that used to live there was handed over to the chart first (where kagent runs) or orphaned (where it does not), so nothing else is in it. Where kagent is on, nothing changes.