GHSA-5W5G-J6HW-6P8F OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy

Impact The console-proxy's RemoteConfigResolver parses kubeconfig data from Kubernetes Secrets using clientcmd.RESTConfigFromKubeConfig without sanitizing the resulting rest.Config. A kubeconfig containing an exec plugin stanza under users.user.exec is faithfully preserved. When rest.TransportFor...