2.12.13

Changelog

• chore(deps): bump envoy from 1.35.11 to 1.35.12 #16932 @kumahq
• chore(deps): bump go version from 1.26.3 to 1.26.4 #16881 @renovate
• chore(deps): security update #17182 @kumahq
• fix(intercp): distinguish unreachable leader from leader change #17152 @kumahq
• fix(kuma): unwrap DeletedFinalStateUnknown in k8s event listener (backport of #17066) #17115 @kumahq
• fix(mads): remove noisy MeshMetrics/metrics coexistence log #17074 @kumahq
• fix(meshtls): sort inbound SAN matchers for stable config #17159 @kumahq
• fix(mtls): drop legacy identity secret when MeshIdentity is assigned (backport of #16947) #17221 @kumahq