agent-platform release v4.68.0

model-manager may read a served model’s route list: with the serving slice on, its egress policy (both flavours) reaches the serving namespace’s workload pods on the workload port, and a preset may not turn the route list off (giantswarm/agent-platform#602). model-manager reads a Ready LLMInferenceService’s GET /version and GET /openapi.json to report the API interfaces it answers (giantswarm/model-manager#144); model-manager’s egress policy had no rule into the serving namespace, so under an enforcing policy engine the read was dropped and every served model reported none. The serving namespace’s ingress admits the release namespace on that port already. The render refuses a preset, shipped or under modelServing.presets, whose spec.args carry --disable-fastapi-docs, naming the flag; the preset schema and the README say the interfaces are discovered, never declared. make verify-model-serving-policies and make verify-serving-slice hold both.