Upgrade to Panda v7 - support key rotation

[rtyley]

This upgrades Panda from v5 to v7, allowing us to use key rotation as introduced with https://github.com/guardian/pan-domain-authentication/pull/150.

• Panda v6 updates:
  • https://github.com/guardian/pan-domain-authentication/pull/151 introduced the new S3BucketLoader abstraction, which simplifies constructing a PanDomainAuthSettingsRefresher and means that Panda is no longer tied to AWS SDK v1 - an alternative AWS SDK v2 implementation of S3BucketLoader could be introduced.

See also:

• https://github.com/guardian/pan-domain-authentication/issues/160

Panda was re-introduced to Frontend with https://github.com/guardian/frontend/pull/27012 in May 2024, where it became the authentication system around pages like https://frontend.gutools.co.uk/.

Testing

This has been successfully deployed to CODE, and I've verified that I can successfully re-authenticate at https://frontend.code.dev-gutools.co.uk/admin:

https://github.com/user-attachments/assets/53e513a0-0790-46ae-9b9a-602d03287738

[github-actions[bot]]

Deploy build 2959 of dotcom:frontend-all to CODE

All deployment options

- [Deploy build 2959 of `dotcom:frontend-all` to CODE](https://riffraff.gutools.co.uk/deployment/deployAgain?project=dotcom%3Afrontend-all&build=2959&stage=CODE&updateStrategy=MostlyHarmless&action=deploy) - [Deploy parts of build 2959 to CODE by previewing it first](https://riffraff.gutools.co.uk/preview/yaml?project=dotcom%3Afrontend-all&build=2959&stage=CODE&updateStrategy=MostlyHarmless) - [What's on CODE right now?](https://riffraff.gutools.co.uk/deployment/history?projectName=dotcom%3Afrontend-all&stage=CODE)

---

From guardian/actions-riff-raff.

[prout-bot]

Seen on FRONTS-PROD (merged by @rtyley 12 minutes and 7 seconds ago)

• Check your changes on www.theguardian.com ✔️
• Keep an eye on the deploy dashboard&_a=(description:'',filters:!(),fullScreenMode:!f,options:(darkTheme:!f,useMargins:!f),panels:!((gridData:(h:4,i:'4',w:6,x:6,y:0),id:'735f9ce0-4a04-11e7-9f15-395e2d1c9b1f',panelIndex:'4',type:visualization,version:'6.2.4'),(gridData:(h:4,i:'5',w:6,x:0,y:0),id:b9249830-4a03-11e7-91e8-2fbfd59c38bb,panelIndex:'5',type:visualization,version:'6.2.4'),(gridData:(h:4,i:'7',w:6,x:0,y:4),id:ac507b90-4a0f-11e7-9f15-395e2d1c9b1f,panelIndex:'7',type:visualization,version:'6.2.4'),(gridData:(h:4,i:'9',w:6,x:6,y:4),id:a5f78860-4ad2-11e7-9930-73b4968e85d8,panelIndex:'9',type:visualization,version:'6.2.4')),query:(language:lucene,query:(query_string:(analyze_wildcard:!t,query:'stage:PROD%20NOT%20app:preview'))),timeRestore:!f,title:'Frontend%20PROD%20Deploy',viewMode:view)) 📉

[prout-bot]

Seen on ADMIN-PROD (merged by @rtyley 12 minutes and 13 seconds ago)

• Check your changes on www.theguardian.com ✔️
• Keep an eye on the deploy dashboard&_a=(description:'',filters:!(),fullScreenMode:!f,options:(darkTheme:!f,useMargins:!f),panels:!((gridData:(h:4,i:'4',w:6,x:6,y:0),id:'735f9ce0-4a04-11e7-9f15-395e2d1c9b1f',panelIndex:'4',type:visualization,version:'6.2.4'),(gridData:(h:4,i:'5',w:6,x:0,y:0),id:b9249830-4a03-11e7-91e8-2fbfd59c38bb,panelIndex:'5',type:visualization,version:'6.2.4'),(gridData:(h:4,i:'7',w:6,x:0,y:4),id:ac507b90-4a0f-11e7-9f15-395e2d1c9b1f,panelIndex:'7',type:visualization,version:'6.2.4'),(gridData:(h:4,i:'9',w:6,x:6,y:4),id:a5f78860-4ad2-11e7-9930-73b4968e85d8,panelIndex:'9',type:visualization,version:'6.2.4')),query:(language:lucene,query:(query_string:(analyze_wildcard:!t,query:'stage:PROD%20NOT%20app:preview'))),timeRestore:!f,title:'Frontend%20PROD%20Deploy',viewMode:view)) 📉