agent-platform release v4.65.0

Changed

• The agentgateway line at 2.1.1 for the controller and the data planes (agentgateway.controller.image, agentgateway.proxy.image; giantswarm/giantswarm#37915). 2.1.1 is 2.1.0 plus the line’s carried patch that reads a file resource from disk on every managed fetch and re-reads it every minute besides its inotify watch, so a rotated projected-volume certificate reaches a backend TLS policy within a minute instead of staying in the resource cache until a restart — the defect that expired the Substrate egress gateway’s client certificate on one installation. Substrate’s egress gateway (substrate.images.agentgateway) still moves with the Substrate release (make verify-substrate-images).