Backport patch-safe fixes for v0.25.2

[thomasmaas]

Summary

Cherry-picked 12 patch-safe fixes from main + authorino operand bump for a v0.25.2 release.

Authorino operand: v0.26.1 → v0.26.2 (release)

• Fix OAuth2 introspection panic on non-200 responses
• Fix authorization failing open on context timeout
• Fix pprof port clash on status update manager
• Fix UMA PAT response body resource leak
• Go 1.26.3 → 1.26.4, CI hardening

Operator fixes:

• 97a6459 — Fix: validate bundle after all modifications complete
• a418ca0 — Fix: fall back to tag_name when release name is empty
• 92f8667 — Fix: handle empty string name in set-replaces-directive
• e0ddc7a — Fix: checkout existing release branch instead of failing on re-release

Toolchain: Go 1.26.3 → 1.26.4

CI: Automated Authorino manifests sync workflow + GPG signature, updated manifests (4 syncs)

Excluded (features):

• e338dd0 — TLS version/cipher suite CRD fields (new API surface)
• cfdd616 — pprof bind address flag (new capability)
• 7d108fd — USE_IMAGE_DIGESTS build flag (new build capability)

Test plan

• go build ./... passes
• Authorino version bumped to v0.26.2
• Authorino v0.26.2 image verified on Quay
• CI passes on this PR

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 60264689-f400-492c-8c63-c43ede0e39bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch backport-v0.25.2-patches

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.20%. Comparing base (418b153) to head (821fcff).

Additional details and impacted files

@@              Coverage Diff              @@
##           release-0.25     #339   +/-   ##
=============================================
  Coverage         57.20%   57.20%           
=============================================
  Files                13       13           
  Lines              1458     1458           
=============================================
  Hits                834      834           
  Misses              529      529           
  Partials             95       95           

Flag	Coverage Δ
unit	57.20% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.