v2.159.0

This release includes a change to how inbound connections are forwarded
on the local pod: instead of sending traffic to the application on
127.0.0.1, the proxy now only forwards traffic on the pod's public IP
address. This protects services that are only bound on the loopback
interface from being exposed to other pods.

This release also improves authorization metrics to include TLS labels
(including the client's identity, if available).

The `/tasks` admin endpoint has been removed, as it no longer works. It
will be replaced with an admin endpoint supporting tokio's `console` in
a future release.