* agent: tolerate partial restore failure from persistent cache * Review comments: improved consistency, test robustness, comments, assertions
* fix: upgrade vault-plugin-auth-kubernetes - on alias look ahead, validate JWT token against the role's configuration