Follow the supply agent's rename

Its Keycloak client and audience scope changed name; the peer entry and the
environment variables that point at it move with them.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

k8s/configmap.yaml

@@ -26,4 +26,4 @@ data:
   CATALOGUE_PUBLIC_URL: http://catalog-agent.agents.svc.cluster.local:8080/
   # The peer's Service name, overriding the default in config.py — set here so
   # the rename took effect without rebuilding an image.
-  CATALOGUE_APPROVISIONNEMENT_URL: http://supply-agent.agents.svc.cluster.local:8080/
+  CATALOGUE_SUPPLY_URL: http://supply-agent.agents.svc.cluster.local:8080/

k8s/deployment.yaml

@@ -30,7 +30,7 @@ spec:
           # repo is public, so the pull needs no credentials — which removes an
           # imagePullSecret that would otherwise have to be created by hand in
           # this namespace and kept in step with a GitHub token.
-          image: gitea.sttlab.eu/stt/classic-models-agent-catalogue:v0.3.2
+          image: gitea.sttlab.eu/stt/classic-models-agent-catalogue:v0.4.0
           ports:
             - name: http
               containerPort: 8080