chore: update all external dependencies to latest versions

[nexus49]

Summary

Update all third-party dependency versions pinned in .github/workflows/ocm.yaml to their latest releases (excluding KCP and KCP Operator — tracked separately).

Dependency Versions

Dependency	Current	Target	Env Var
OpenFGA (chart)	0.2.54	0.2.62	PM_OPENFGA_VERSION / OPENFGA_VERSION
OpenFGA (image)	v1.11.5	v1.14.0	OPENFGA_IMAGE_VERSION
OpenFGA PostgreSQL (image)	17.6.0-debian-12-r4	17.9.0-debian-12-r*	OPENFGA_POSTGRESQL_IMAGE_VERSION
Keycloak	26.5.2	26.6.0	PM_KEYCLOAK_VERSION
Gateway API	v1.4.1	v1.4.1 (already latest)	GATEWAY_API_VERSION
Traefik (chart)	39.0.7	39.0.7 (already latest stable)	TRAEFIK_VERSION
Traefik (image)	v3.6.12	v3.6.13	TRAEFIK_IMAGE_VERSION
Traefik CRD	1.14.0	1.16.0	TRAEFIK_CRD_VERSION
Cert-Manager	v1.19.2	v1.20.1	CERT_MANAGER_VERSION

Tasks

• Update env vars in .github/workflows/ocm.yaml
• Confirm exact Bitnami PostgreSQL 17 image tag (debian suffix)
• Update GATEWAY_API_COMMIT if Gateway API version changes
• Verify the aggregator build succeeds with updated versions

Notes

• KCP and KCP Operator updates are tracked in a separate issue.
• Platform-mesh internal components are resolved dynamically via ocm get componentversions --latest and don't need manual updates.
• Gateway API and Traefik chart are already at latest stable — no action needed for those.
• PostgreSQL 17.6 → 17.9 is a minor version bump — no migration or pg_upgrade required.