Bump AWF firewall version to v0.25.52

[lpcox]

Request

Bump the AWF firewall container images to v0.25.52.

Notable Changes in v0.25.52

• api-proxy: middle-power model fallback with stale-cache recovery (Daily Firewall Report - November 11, 2025 #3607) — when model resolution fails, selects a middle-power model from available options instead of forwarding an invalid request
• api-proxy: fallback unavailable gpt-5.x requests to highest available family model (Add optional fingerprint field for asset tracking #3602) — family-aware fallback for GPT-5.x series
• docs(spec): add port information to /reflect endpoint sections (Daily Firewall Report - November 10, 2025 #3561)
• Stabilize test-coverage-reporter by isolating main-action unit tests from DinD probing ([task] Reclassify cache-memory as tools configuration in frontmatter documentation #3595)
• Refactors: shared teardown helper (Standardize prompt generation pattern - move scattered functions to dedicated files #3564), token-persistence helpers (Fix bundler generating invalid JavaScript for multi-line module.exports #3566), positive-integer parsing (Refactor: Extract duplicate comment helpers into separate modules #3565), dead code removal (Update golang.org/x/sys from v0.37.0 to v0.38.0 #3563, [duplicate-code] 🔍 Duplicate Code Detected: Logs Report Tool Failure Summaries #3584)
• Schema sync: source AWF schema copy aligned with documented schema (Update golang.org/x/sync to v0.18.0 and add Go/Node/Python to default allowed domains #3567)

Version

ghcr.io/github/gh-aw-firewall/{squid,agent,api-proxy,cli-proxy}:0.25.52