deps: bump Portainer CE + Agent 2.41.1 → 2.43.0 (both together)

[botAGI]

Image	Var	Current → Latest
portainer/portainer-ce	PORTAINER_VERSION	2.41.1 → 2.43.0
portainer/agent	PORTAINER_AGENT_VERSION	2.41.1 → 2.43.0

⚠️ Must bump BOTH together

Master (portainer-ce) and the peer agent must be the exact same version. A version mismatch produces a TLS handshake EOF and a misleading "agent already paired with another Portainer instance" error in the UI. Bump PORTAINER_VERSION and PORTAINER_AGENT_VERSION in the same commit.

Notes

• After the bump, verify the endpoint recovers to Up (Status=1, not Down) — Docker 29 API-compat has bitten older Portainer clients before; 2.43.0 should be clear but confirm on the live master.
• group_add: ["${DOCKER_GID}"] must stay for /var/run/docker.sock access.

Definition of Done

• arm64 present for both: docker manifest inspect portainer/portainer-ce:2.43.0 | grep -c '"architecture": "arm64"' ≥ 1 and same for portainer/agent:2.43.0
• Bump both PORTAINER_VERSION and PORTAINER_AGENT_VERSION in templates/versions.env
• bash tests/compose/test_image_tags_exist.sh core/compose.yml green
• If rendered config changes: AGMIND_GOLDEN_ACCEPT=1 bash tests/golden/run.sh --update --update-all (verify drift is expected)
• Live-validate on a DGX Spark: master + peer endpoints both Up, agmind doctor = 0 errors
• Rollback confirmed: agmind update --rollback
• PR against develop

Part of #131 · data source: #130