agent-platform release v4.127.0

The chart registers the workspaces’ CSI driver with Substrate (giantswarm/agent-platform#888). With workspaces.enabled and workspaces.substrate.csiDriver.name set, the connectivity release renders the cluster-scoped CSIDriverConfig (ate.dev/v1alpha1) named after the driver from csiDriver (controllerEndpoint, nodeSocketOverride, tls with Substrate’s pod identity), once Substrate’s CRDs are there (components.substrate on, or a cluster that serves the API), so a Session mounts its workspace’s volume without a hand-applied object. In the Cilium flavour ate-api-server’s egress admits the cluster on the controller endpoint’s port. The render fails naming the key on driver keys without a name, an endpoint without a port, tls without the pod identity, and a driver that is not the workspace StorageClass’s provisioner (the preset’s, or the provided class’s on the cluster). No --preview argument is passed: the Substrate line carries no preview gate. make verify-workspace-substrate.