Security fixes

Moderate GHSA-fxfw-2m4j-xmc8 - Kubernetes approval for one API token authorizes a different token of the same user

Suggested action: upgrade if using Kubernetes targets with approvals via token authentication

When approval grace period is enabled and an approval for a Kubernetes target is remembered, it becomes valid for all tokens of that user instead and not just the token the approval was given for.

High GHSA-hhq8-x2xc-95qx - HTTP proxy follows cross-host redirects from upstream targets

Suggested action: upgrade if using untrusted/user-controlled HTTP targets

Warpgate follows HTTP redirects sent by the target, allowing SSRF by a malicious target.

Moderate GHSA-r7rf-j762-2xxv - MySQL/Postgres unencrypted auth methods used without TLS in TLS Preferred mode

Suggested action: set an explicit TLS mode (enabled/disabled)

When TLS mode is set to "Preferred" and the target does not offer TLS, Warpgate would still accept plaintext authentication if it's the only available and supported auth mechanism.

Full Changelog: v0.30.3...v0.30.4