Release 1.0.1 Hotfix

This includes two security and architecture improvements to the Enterprise Agent Toolkit:

Secure standalone Redis Stack: require auth, drop NodePort, add NetworkPolicy
The standalone Redis Stack chart previously deployed with type: NodePort and no authentication. Since deploy_redis=on is the default, every deployment published Redis on all node IPs in the 30000–32767 range with full access, allowing anyone who could route to a node to read/modify agent session data.
Changes:

Add secret.yaml holding the password and full connection URL; inject via REDIS_ARGS=--requirepass
Default the Service type to ClusterIP (in-cluster only)
Add an opt-in NetworkPolicy for namespace-level access control
Generate redis_stack_password in vault.yml (independent of gateway's redis_password)
Document credentials, ClusterIP-only access model, and NodePort firewalling guidance
BREAKING CHANGE: Existing deployments lose the Redis NodePort and now require a password. Clients should read the URL from the redis-stack-server-credentials Secret.

Streamline authentication stack to use GenAI Gateway native auth
Remove legacy Keycloak identity provider integration that is no longer part of the active deployment path. The toolkit uses GenAI Gateway (LiteLLM) for API key management and access control.
Changes:

Simplify deployment flow by removing unused auth service orchestration
Clean up helm charts, playbooks, and scripts for leaner codebase
Retain OIDC configuration hooks in helm values for extensibility