Vulnerability disclosure and patch management

UDS Core's default operator authentication accepted any client secret for three release trains

A logic error in the uds-identity-config Keycloak authenticator compared the mounted Kubernetes secret against itself. Patched version numbers do not sort in the order operators expect.