[STAC-25515] [stackstate-agent] Consume fixed cryptography and publish agent images

[kkaempf]

STAC-25515

Context

The VEX-aware dev-chart scan run 30886199319 found two High and one Medium newly disclosed cryptography vulnerabilities in stackstate-k8s-agent:9516cb41.

The previous agent OTel/cel findings are gone in chart version 1.5.40. This is a separate dependency wave. The vulnerable package comes from the integrations release consumed through STACKSTATE_INTEGRATIONS_VERSION in stackstate-deps.json.

Upstream work is tracked by STAC-25514.

Required work

1. After STAC-25514 In review publishes the fixed integrations tag, update STACKSTATE_INTEGRATIONS_VERSION.
2. Regenerate the agent Python requirements and verify they contain cryptography==50.0.0.
3. Build and scan the affected agent image variants.
4. Publish/promote the agent and cluster-agent tags coherently.
5. Propagate the released tags into the agent chart version consumed by cve-reporter.
6. Run the VEX-aware chart scan and confirm CVE-2026-69247, CVE-2026-69249, and CVE-2026-69248 are absent.

Acceptance criteria

• The published StackState agent image contains cryptography 50.0.0.
• The chart resolves to that published image.
• The three findings no longer appear after VEX in Trivy or Grype output.