agent-platform release v4.74.3

Fixed

• The kagent controller’s metrics port and atenet-egress’s ext-proc 9090 are admitted from the cluster entity, so their monitors scrape (giantswarm/giantswarm#36711). The controller’s ingress policy opened the API port 8083 only, so the scrape of kagent.controller.metrics.bindAddress (:8080) was dropped and kagent-controller-metrics reported up=0 on every installation; the rule renders while kagent.controller.metrics.enabled is true, in both flavours, and never opens the API port. substrate-atenet-egress opened 15020 only, so the ext-proc’s 9090 target was down the same way. make verify-kagent-netpol asserts both.