agent-platform release v4.128.0

components.workspace-manager.versionRange is >=0.5.0 <1.0.0 (was >=0.4.0 <1.0.0), and the customer BOM pins workspace-manager 0.5.0: the provider kind gitlab (giantswarm/workspace-manager#54). A workspace-manager.providers[] instance of kind gitlab connects a person’s GitLab account (gitlab.com or a self-managed GitLab, CE or EE) through an OAuth application with the scopes api read_user read_repository write_repository, and syncs a workspace’s mirrors with a group access token (read_api, read_repository); its values are url, apiURL (default <url>/api/v4), token and oauth.clientID/oauth.clientSecret, credentials as Secret references only, and the connectivity chart opens the manager’s egress to its hosts. An earlier manager refuses the kind at start, so a gitlab instance under a range whose floor is below 0.5.0 fails the render naming the floor (agent-platform.workspaceManager.gitlabFloor; a release candidate of it counts too). The chart takes no new value, so the release rolls in place. make verify-workspace-manager.