Changelog

• chore(deps): bump coredns from 1.14.2 to 1.14.6 #17403 @kumahq
• chore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 #17534 @renovate
• chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 #17535 @renovate
• chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 #17536 @renovate
• chore(deps): security update #17622 #17681 @kumahq
• feat(api-server): add pluggable per-route metadata provider (backport of #17365) #17371 @kumahq
• fix(kds): attribute zone-to-global synced resources by the connecting zone's client-id (backport of #17456) #17459 @kumahq
• fix(tokens): reject a non-string kid header and recover from dp-server handler panics (backport of #17465) #17472 @bartsmykla