chore: bump default firewall version to v0.25.23

[lpcox]

Summary

Bump DefaultFirewallVersion from v0.25.22 to v0.25.23.

Steps

1. Update pkg/constants/version_constants.go: change DefaultFirewallVersion to "v0.25.23"
2. make build
3. make recompile (regenerate all 192 lock files)
4. make update-wasm-golden (update golden test fixtures)
5. make agent-finish (full validation)

Files Changed

• pkg/constants/version_constants.go
• All .lock.yml workflow files (via make recompile)
• Golden test fixtures (via make update-wasm-golden)