docs(anc): reword wrapper hotfix comment for LPS endpoint read channel

The hotfix pointer read channel moved from the kube-system ConfigMap (apiserver +
bootstrap token) to the LPS endpoint (IMDS-attested); the fetch/auth rewrite lives in
2.1b. The wrapper's check-hotfix -> download-hotfix call contract, the
ENABLE_PROVISIONING_HOTFIX gate, and the fail-open semantics are unchanged - only the
explanatory comment is updated to name the new read channel accurately.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: 2 people

parts/linux/cloud-init/artifacts/aks-node-controller-wrapper.sh

@@ -27,7 +27,7 @@ if [ ! -f "$CONFIG_PATH" ] && [ ! -f "$NBC_CMD_PATH" ]; then
     exit 0
 fi
 
-# check-hotfix reads the kube-system/anc-hotfix-version ConfigMap and refreshes
+# check-hotfix reads the hotfix pointer from the LPS endpoint (IMDS-attested) and refreshes
 # $HOTFIX_JSON, which the download-hotfix block below consumes, so it must run first.
 # Gated default-off behind ENABLE_PROVISIONING_HOTFIX so existing VHDs behave exactly as
 # before; only the literal string "true" enables it. This env var is the on-node terminal