Builder images refreshed for current agent bootstrap (
43d60f6)
Republished the builder images with updated bootstrap logic so Buildkite agents can fetch their registration token from cloud secret stores instead of launch-time tags. AWS now reads from Secrets Manager and Azure from Key Vault, with a fallback to the older metadata tag path for pre-secret images.
This also removes token-related launch parameters/tags from machine provisioning, tightening how credentials are passed to CI machines and reducing dependence on instance metadata for new images.
Other misc changes
- None beyond the builder-image/bootstrap refresh.