update kafka to 3.9.2

[rursprung]

Description

this resolves CVE-2026-35554, amongst others,
see the full changelog: https://downloads.apache.org/kafka/3.9.2/RELEASE_NOTES.html

note: this only applies to 2.19.x, for 3.x we're already on kafka 4.2.0.

Issues Resolved

n/a

Testing

n/a (i let the CI handle this)

Check List

• New functionality includes testing
• New functionality has been documented
• New Roles/Permissions have a corresponding security dashboards plugin PR
• API changes companion pull request created
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[rursprung]

BWC failures seem to be unrelated (flaky)
WhiteSource reports netty (will be fixed with opensearch-project/OpenSearch#21224) and plexus-utils (transitive via checkstyle) => i presume this will be fixed in another PR by someone else? checkstyle is not in the final product, thus this is sort-of irrelevant for me)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.25%. Comparing base (7872516) to head (54de841).
⚠️ Report is 1 commits behind head on 2.19.

Additional details and impacted files

@@            Coverage Diff             @@
##             2.19    #6089      +/-   ##
==========================================
- Coverage   68.26%   68.25%   -0.02%     
==========================================
  Files         348      348              
  Lines       24719    24719              
  Branches     4111     4111              
==========================================
- Hits        16875    16872       -3     
- Misses       5919     5921       +2     
- Partials     1925     1926       +1     

see 6 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.