Changelog

• chore(deps): bump coredns from 1.14.2 to 1.14.6 #17402 @kumahq
• chore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 #17527 @renovate
• chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 #17528 @renovate
• chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 #17529 @renovate
• chore(deps): security update #17625 #17679 @kumahq
• feat(api-server): add pluggable per-route metadata provider (backport of #17365) #17373 @kumahq
• fix(kds): attribute zone-to-global synced resources by the connecting zone's client-id (backport of #17456) #17463 @kumahq
• fix(meshaccesslog): match rule-scoped route ids #17557 @kumahq
• fix(meshproxypatch): match unified listener names #17556 @kumahq
• fix(mtp): unified naming for zone egress #17565 @kumahq
• fix(tokens): reject a non-string kid header and recover from dp-server handler panics (backport of #17465) #17471 @bartsmykla
• fix(xds): fix inbound cluster name lookup #17510 @kumahq
• fix(xds): fix unified naming detection for zone proxies #17526 @kumahq
• fix(xds): probe fallback route uses unified cluster name #17500 @kumahq
• fix(xds): unified naming for zone-proxy admin cluster #17553 @kumahq