v19.98.2

What's Changed

• chore: sync managed files from governance template by @robinmordasiewicz in #2530
• fix(manager): never probe a port already handed out — the probe could kill its own worker by @robinmordasiewicz in #2533
• fix(sandbox): check a redirect target against the boundary it actually crosses by @robinmordasiewicz in #2536
• chore: bump version to v19.98.2 by @robinmordasiewicz in #2537

Full Changelog: v19.98.1...v19.98.2