agent-platform release v4.45.1

Fixed

• The image-verification egress names the registry’s blob storage (giantswarm/agent-platform#599, the live check of 4.44.3). The registry redirects a blob read — the Sigstore bundle’s layer — to an Azure Storage account (<account>.blob.core.windows.net), not to a dedicated data endpoint: with 4.44.3’s allow-list Kyverno’s admission controller got past DNS and the registry and stopped at failed to fetch referrer layer: Get "https://<account>.blob.core.windows.net/…", every model pod still denied. modelServing.imageVerification.kyvernoEgress.hosts defaults to *.blob.core.windows.net in place of *.*.data.azurecr.io (a registry with dedicated data endpoints names that pattern itself), mirrored in both charts; make verify-model-serving-policies holds the default list.