Release v2.47.0

Changed

• The tenancy guide links to the organization, workspace and namespace vocabulary

Security

• AuthProxy now removes every client-supplied forwarded-identity context header and compares protected header names without regard to case or to _ versus -, so backends only see identity headers that AuthProxy set itself. Routing headers such as x-cratis-microservice are still forwarded (#252)