fix(e2e): lower pull secret in-place propagation test gate to 4.22

The CP pull-secret watches were backported to release-4.22 via PR #8408,
so the e2e test should run on 4.22+ clusters, not just 4.23+.

Backport: #8408

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: enxebre

test/e2e/util/util.go

@@ -2011,7 +2011,7 @@ func EnsureGlobalPullSecret(t *testing.T, ctx context.Context, mgmtClient crclie
 		// Verify that in-place management-cluster pull secret updates propagate to the guest cluster
 		// without triggering a NodePool rollout.
 		t.Run("When management-cluster hostedCluster.Spec.PullSecret is updated in-place it should propagate to guest without rollout", func(t *testing.T) {
-			CPOAtLeast(t, Version423, entryHostedCluster)
+			CPOAtLeast(t, Version422, entryHostedCluster)
 			g := NewWithT(t)
 			t.Logf("Reading management-cluster pull secret %s/%s", entryHostedCluster.Namespace, entryHostedCluster.Spec.PullSecret.Name)
 			mgmtSecret := &corev1.Secret{}