Bump AWF firewall to v0.25.25 and MCP gateway to v0.2.25

[lpcox]

Summary

Bump the Agent Workflow Firewall (AWF) to v0.25.25 and the MCP Gateway (MCPG) to v0.2.25.

Changes Required

1. Update firewall version

• File: pkg/constants/constants.go
• Field: DefaultFirewallVersion
• From: current → v0.25.25

2. Update MCP gateway version

• File: pkg/constants/constants.go
• Field: DefaultMCPGatewayVersion
• From: current → v0.2.25

3. Recompile all workflows

make build && make recompile

4. Validate

make agent-finish

Checklist

• Update DefaultFirewallVersion to v0.25.25
• Update DefaultMCPGatewayVersion to v0.2.25
• make build
• make recompile (updates all .lock.yml files)
• make agent-finish passes