Release NGINX Ingress Controller 3.5.2

[danielnginx]

Add support to NGINX PLUS R32

Notes: make sure that we have the latest base images

Tasks

Beta Give feedback

1. QE sign off - ensure that we are shipping without bugs and we have the latest base OS images
2. Security sign off - ensure that we are not shipping any fixable CVE's and if we have CVE's they are documented
3. Ensure that NIC builds on top the most recent base images #5555
   backlog +1
   
4. Docs release note & Changelog
5. AWS Release
6. Rancher release verification
7. GCP Release
8. Release Operator
9. Update NGINX OSS
10. Unpin version WAF version 4
11. Document the WAF changes

[oseoin]

Base OS images on release-3.5 confirmed up to date:

The provided SHA256 hash is the latest for opentracing/nginx-opentracing:nginx-1.25.4
The provided SHA256 hash is the latest for opentracing/nginx-opentracing:nginx-1.25.4-alpine
The provided SHA256 hash is the latest for ghcr.io/nginxinc/alpine-fips:0.1.0-alpine3.17
The provided SHA256 hash is the latest for ghcr.io/nginxinc/alpine-fips:0.1.2-alpine3.[19](https://github.com/nginxinc/kubernetes-ingress/actions/runs/9282759502/job/25541472875#step:3:20)
The provided SHA256 hash is the latest for nginx:1.25.4-alpine
The provided SHA256 hash is the latest for nginx:1.25.4
The provided SHA256 hash is the latest for nginxcontrib/nginx:1.25.4-ubi
The provided SHA256 hash is the latest for alpine:3.19
The provided SHA256 hash is the latest for alpine:3.17
The provided SHA256 hash is the latest for debian:12-slim
The provided SHA256 hash is the latest for debian:11-slim
The provided SHA256 hash is the latest for redhat/ubi9-minimal
The provided SHA256 hash is the latest for redhat/ubi9
The provided SHA256 hash is the latest for redhat/ubi8
> A newer version of golang:1.22-alpine is available:
> - golang:1.22-alpine@sha256:b8ded51bad03238f67994d0a6b88680609b392db04312f60c23358cc878d4902
> + golang:1.22-alpine@sha256:4[21](https://github.com/nginxinc/kubernetes-ingress/actions/runs/9282759502/job/25541472875#step:3:22)bc7f4b90d042c56282bb894451108f8ab886687e1b73abaefad31ab10a14d
> updating ./build/Dockerfile
> A newer version of golang:1.[22](https://github.com/nginxinc/kubernetes-ingress/actions/runs/9282759502/job/25541472875#step:3:23)-alpine is available:
> - golang:1.22-alpine@sha256:b8ded51bad03[23](https://github.com/nginxinc/kubernetes-ingress/actions/runs/9282759502/job/25541472875#step:3:24)8f67994d0a6b88680609b392db04312f60c23358cc878d4902
> + golang:1.22-alpine@sha256:421bc7f4b90d042c56282bb894451108f8ab886687e1b73abaefad31ab10a14d
> updating ./build/Dockerfile
The provided SHA[25](https://github.com/nginxinc/kubernetes-ingress/actions/runs/9282759502/job/25541472875#step:3:26)6 hash is the latest for kindest/node:v1.29.2
The provided SHA256 hash is the latest for python:3.12

golang:1.22-alpine is not shipped but will be updated

[oseoin]

Pre-release final check of base OS images: https://github.com/nginxinc/kubernetes-ingress/actions/runs/9318884521/job/25652142377
golang:1.22-alpine is only used for local development so should not impact release

The provided SHA256 hash is the latest for opentracing/nginx-opentracing:nginx-1.25.4
The provided SHA256 hash is the latest for opentracing/nginx-opentracing:nginx-1.25.4-alpine
The provided SHA256 hash is the latest for ghcr.io/nginxinc/alpine-fips:0.1.0-alpine3.17
The provided SHA256 hash is the latest for ghcr.io/nginxinc/alpine-fips:0.1.2-alpine3.[19](https://github.com/nginxinc/kubernetes-ingress/actions/runs/9318884521/job/25652142377#step:3:20)
The provided SHA256 hash is the latest for nginx:1.27.0-alpine
The provided SHA256 hash is the latest for nginx:1.27.0
The provided SHA256 hash is the latest for nginxcontrib/nginx:1.27.0-ubi
The provided SHA256 hash is the latest for alpine:3.19
The provided SHA256 hash is the latest for alpine:3.17
The provided SHA256 hash is the latest for debian:12-slim
The provided SHA256 hash is the latest for debian:11-slim
The provided SHA256 hash is the latest for redhat/ubi9-minimal
The provided SHA256 hash is the latest for redhat/ubi9
The provided SHA256 hash is the latest for redhat/ubi8
> A newer version of golang:1.[22](https://github.com/nginxinc/kubernetes-ingress/actions/runs/9318884521/job/25652142377#step:3:23)-alpine is available:
> - golang:1.22-alpine@sha256:b8ded51bad03[23](https://github.com/nginxinc/kubernetes-ingress/actions/runs/9318884521/job/25652142377#step:3:24)8f67994d0a6b88680609b392db04312f60c23358cc878d4902
> + golang:1.22-alpine@sha256:7e788330fa9ae95c68784153b7fd5d5076c79af47651e992a3cdeceeb5dd1df0
> updating ./build/Dockerfile
> A newer version of golang:1.22-alpine is available:
> - golang:1.22-alpine@sha[25](https://github.com/nginxinc/kubernetes-ingress/actions/runs/9318884521/job/25652142377#step:3:26)6:b8ded51bad03238f67994d0a6b88680609b392db04312f60c23358cc878d4902
> + golang:1.22-alpine@sha256:7e788330fa9ae95c68784153b7fd5d5076c79af47651e992a3cdeceeb5dd1df0
> updating ./build/Dockerfile
The provided SHA256 hash is the latest for kindest/node:v1.30.0
The provided SHA256 hash is the latest for python:3.12