[release-1.21] Bump dynamiclistener to fix apiserver outage issue

[brandond]

Proposed Changes

Bump dynamiclistener to fix an issue where circular outages can prevent the supervisor from accepting new connections:

1. supervisor on apiserver-only node tries to talk to bootstrap node during startup to reconcile bootstrap data (can't do it locally, no etcd)
2. when accepting the TLS connection from the apiserver-only node, the etcd-only bootstrap node tries to talk to an apiserver to update the dynamiclistener certificate secret
3. apiserver on apiserver-only node is still running in static pod from previous startup, but it is not responsive because it can't talk to any etcd servers through load-balancer tunnel, since it doesn't come up until step 1 is done
4. apiserver-only rke2 supervisor startup fails due to TLS handshake eventually timing out

Running rke2-killall.sh on the apiserver-only node allows the start to succeed, as it kills the apiserver static pod, which in turn causes the dynamiclistener certificate update to fail (which IS handled properly) instead of just hanging.

• Waiting on merge of Move Kubernetes Secrets storage update to goroutine dynamiclistener#57

Types of Changes

bugfix / version bump

Verification

See linked issue

Linked Issues

• Second control plane node stuck while upgrading from v1.21.12+rke2r1 to v1.22.8+rke2r1 #2834

Further Comments