v1.25.4 release

What's Changed

• [release-1.25] fix: avoid duplicate ssl mounts on Fedora node in AzureStack environment by @andyzhangx in #1874
• [release-1.25] chore: increase liveness-probe timeout by @andyzhangx in #1880
• [release-1.25] test: ignore CVE-2025-22870 in azcopy by @k8s-infra-cherrypick-robot in #1884
• [release-1.25] feat: support workload identity by @k8s-infra-cherrypick-robot in #1889
  • This feature no longer retrieves storage account key using federated identity credentials starting from v1.25.4 or v1.26.1 and later versions, while it requires Storage Blob Data Contributor role on the account instead of Storage Account Contributor role.
• [release-1.25] test: ut for parseServiceAccountToken by @k8s-infra-cherrypick-robot in #1893
• [release-1.25] feat: add metrics on node config by @andyzhangx in #1898
• doc: cut v1.25.4 release by @andyzhangx in #1900

Full Changelog: v1.25.3...v1.25.4