chore: update firewall image to 2.9.4

[socket-release-bot]

Updates deployment defaults to the published Socket Firewall image 2.9.4 and bumps the Helm chart patch version.

Image: socketdev/socket-registry-firewall:2.9.4
Release run

Manual review is required before merging:

• Review the release changes for configuration or behavioral changes.
• Update deployment documentation and migration examples where needed.
• Check the Helm chart version and CloudFormation defaults, including other pending version PRs.

---

Note

Medium Risk
Deploys a new firewall runtime version across Helm and CloudFormation defaults; reviewers should confirm 2.9.4 release notes for behavioral or config changes before merge.

Overview
Bumps deployment defaults from 2.8.0 / chart 0.11.6 to socketdev/socket-registry-firewall:2.9.4 and Helm 0.11.7, keeping Chart.yaml appVersion, helm/values.yaml, docs, CloudFormation parameters (FirewallImageTag, ChartVersion), and the EKS example values file aligned.

Fresh installs and stacks that rely on defaults will pull the new image and chart version; existing clusters that pin tags in their own values are unchanged unless they adopt these defaults.

^{Reviewed by Cursor Bugbot for commit ccda51c. Configure here.}