Bump gh-aw-firewall to v0.28.62 #69525

Summary

Upgrade the default gh-aw-firewall (AWF) version from v0.28.59 to v0.28.62.

Upstream changes to review

• Publish the router image in releases and use it by default: feat(router): publish the router image in releases and use it by default gh-aw-firewall#10104.
• Add a versioned JSON Schema for routing tables at version 1 (marked as a breaking change): feat(router)!: add a versioned JSON Schema for routing tables at version 1 gh-aw-firewall#10129.
• Recover enclave logs and separate work, cleanup, and padding diagnostics: fix: recover enclave logs and separate work, cleanup, and padding diagnostics gh-aw-firewall#10133.

Review the intervening releases as well as the target release for compatibility changes.

Implementation

• Set DefaultFirewallVersion in pkg/constants/version_constants.go to v0.28.62.
• Review existing AWF*MinVersion gates; adjust only where required by changed feature support.
• Review upstream AWF specifications and schemas against the embedded schema, specs/awf-config-sources-spec.md, and AWF config generation/validation. Address integration changes needed for compatibility, especially the routing-table schema and default router image.
• Add or update relevant tests and documentation, and add a patch changeset for shipped behavior changes.
• Regenerate compiled workflows and image SHA pins using make build, make recompile, and a second make recompile, in that order.
• Run focused AWF validation and the repository-required final checks.

Acceptance criteria

The default AWF version is v0.28.62, generated artifacts and image pins are consistent with that version, and relevant compatibility checks pass.