v1.35.3
Bump images and versions to go 1.25.7 and distroless iptables
Merge pull request #136903 from pohly/automated-cherry-pick-of-#136455-origin-release-1.35
add go.work.sum to dep-approvers file list
Update staging docs to add externaljwt