bumping KDM for Windows 1.23

[release/v1.3] Check if default k8s version is among all versions

 rotate the encryption key only when updating an existing cluster that has secret encryption enabled

[release/v1.3] Add pre release notes with k8s versions included

RKE will panic if we enable rotate_encryption_key but disable secrets_encryption_config when creating a cluster. The panic happens because RKE tries to use the rkeConfig, which does not exist. The rkeConfig will be made after the rke up command succeeds.
Solution:
Skip the rotateEncryptionKey operation when creating a new cluster. Also, In this case, keys are just made for the first time, so there is no need to rotate them.

This reverts commit f1ba3150.

update codegen release branch

update kdm data