3.228.0

Added

• Added Google Secret Manager as a source for database branching connection
  parameters, so the branch data copy can fetch secrets (such as the source
  database password) at runtime without putting them in the mirrord config, a
  Kubernetes Secret, or the pod spec. Set env_var_name to also expose the
  resolved value to your local process for a local or preview override.

Changed

• Updated kube-rs to 4.0. The Kubernetes client now falls back to the
  operating system's native trust store through the rustls platform verifier
  when a kubeconfig sets no CA, rather than to a bundled set of root
  certificates. #4468
• Adjust go hook implementation that's behind the go_asmcgocall experimental
  flag.
• Changed experimental go_cgo_stack_switch go hook implementation to resolve
  g TLS offset dynamically.