chore(deps): update module github.com/twmb/franz-go/plugin/kprom to v1.4.0 (main)

[tempo-ci-app]

What this PR does:

Automated CI fix for #7384, which Renovate can't self-resolve. This branch is that PR's head plus the fix; merging it lands the dependency update with CI green.

kprom v1.4.0 added a new GaugeFunc buffered_produce_bytes that collides with tempo's existing Summary of the same name once the tempo_distributor_ registerer prefix is applied, causing the distributor to panic during startup in unit and all e2e tests. Renamed the tempo Summary to buffered_produce_bytes_summary (the kprom GaugeFunc now exposes tempo_distributor_buffered_produce_bytes) and added a chloggen entry; go build ./... and go test ./pkg/ingest/... ./modules/distributor/... both pass locally.

Which issue(s) this PR fixes:

Supersedes #7384

Checklist

• Tests updated
• Documentation added
• Changelog entry added under .chloggen/ (run make chlog-new, or make chlog-new FILENAME=<name> to override the default branch-name file; see .chloggen/README.md)

[github-actions]

⚠️ The workflow jobs listed below don't declare a permissions: block and may break when the organization's default GITHUB_TOKEN permissions are restricted to read-only.

Expand for findings

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/deploy-pr-preview.yml:13:3
   |
13 | /   deploy-pr-preview:
14 | |     if: "!github.event.pull_request.head.repo.fork"
15 | |     uses: grafana/writers-toolkit/.github/workflows/deploy-preview.yml@4dbecae7443c69b3e5fdfeeac7037a339cb82e4c # main
16 | |     with:
...  |
31 | |       title: ${{ github.event.pull_request.title }}
   | |                                                    ^
   | |                                                    |
   | |____________________________________________________this job
   |                                                      default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

[github-actions]

This PR has been automatically marked as stale because it has not had any activity in the past 60 days.
The next time this stale check runs, the stale label will be removed if there is new activity. This pull request will be closed in 15 days if there is no new activity.
Please apply keepalive label to exempt this Pull Request.