agent-platform release v4.101.2

Every BackendTrafficPolicy targets its route without targetRefs[].namespace (giantswarm/agent-platform#377). Envoy Gateway has declared local policy target references (group, kind, name, sectionName) since v1.1, so helm-controller’s server-side apply refused the four policies the connectivity chart renders with ingress.backendTrafficPolicy.enabled (agentgateway, muster, kagent-controller-public) or kagent.uiRoute (the kagent UI) with .spec.targetRefs[0].namespace: field not declared in schema, and the whole connectivity upgrade failed. A client-side apply had the API server prune the field, so the stored objects there do not change. make verify-kagent-route asserts it.