agent-platform release v4.67.2

Added

• Every emptyDir of a model pod has a sizeLimit (giantswarm/agent-platform#556). The serving policies bound the volumes KServe composes into the pod and into its Deployment’s template — dshm at modelServing.serving.shmSizeLimit (8Gi, room for tensor parallelism), the download’s volume at modelCacheSizeLimit (100Gi) when the cache is off, every other one at emptyDirSizeLimit (1Gi) — so Kyverno’s require-emptydir-requests-and-limits audit no longer reports a served model’s pod and Deployment. A modelCacheSizeLimit below an hf:// preset’s weights fails the render.