v2.152.0

v1.152.0

This release changes outbound behavior to tear down server-side
connections when the remote proxy returns responses indicating proxy
errors. This usually indicates the application or its proxy is not in a
good state, so the connection reset allows the application to connect to
a new endpoint.

Additionally, the proxy now does not process connection until identity
is established, setting up for policy discovery. While this changes
proxy behavior, this should not be a user-facing change, as containers
are blocked on the proxy's readiness.

Finally, the proxy hs been updated to support inbound server
authorization policies. These policies have a limited configuration via
the environment, but are not yet configurable via a controller API.