chore: update CozyStack upstream to 5786afe

[kingdonb]

🤖 Automated CozyStack Dependency Update

This PR automatically updates our CozyStack upstream dependency.

Changes:

• Updated upstream commit to: 5786afe
• Upstream date: 2026-05-01T11:45:30Z
• Patch compatibility: failure ✅

Recent Upstream Changes

5786afe8 feat(kubernetes): add kubelet resource reservations for worker nodes (#2420)
b5a1ae57 feat(etcd): update operator to v0.4.3 and expose S3 backup schedules (#2428)
70e507ee fix(security): bump Go dependencies to clear Dependabot CVE alerts (#2494)
9432cdfa chore(ci): replace Dosu stale and size labeling with native workflows (#2504)
e9351a67 fix(tests): increase Bootstrap Talos cluster timeout to 60s (#2431)
5ef1500b fix(seaweedfs): pass filer.replicas and s3.replicas to HelmRelease (#2533)
8c85e69b feat(talos): bump Talos to v1.13.0 (#2546)
431eac8d fix(talos): bump Talos to v1.12.7 (CVE-2026-31431) (#2545)
179b603c feat(talos): bump Talos to v1.13.0
8549f3b9 fix(talos): bump Talos to v1.12.7 (CVE-2026-31431)

⚠️ Potential Breaking Changes Detected:

dff5f8d1 feat(kubernetes)!: replace ephemeral emptyDisk with persistent storage for worker nodes (#2454)
0aed318b feat(seaweedfs): limit single PUT request size to 5GB (#2414)
69ad74e4 fix(cozystack-engine): add managed Kubernetes without visible control-plane nodes support to lineage-controller-webhook (#2481)
d2b4a449 feat(cozy-proxy): bump to v0.3.0 (#2510)
bc1eca10 chore(ci): adopt CNCF/k8s label conventions (#2495)
86a1e811 fix(ci): accept hyphenated BREAKING-CHANGE footer in pr-labeler
c8ed1c65 chore(ci): adopt CNCF/k8s label conventions
3afcaa5d docs(kubernetes): clarify persistence scope in breaking changes note
a451a898 docs(kubernetes): document ephemeralStorage to diskSize breaking change
0ac22803 feat(kubernetes)!: replace emptyDisk with persistent dataVolumeTemplates for worker nodes
dfa6fd99 feat(kubernetes)!: rename ephemeralStorage to diskSize in node group config
171c793c feat(platform): add resourcePreset labels to workloadmonitor labels (#2416)

🧪 Pre-flight Checks

• Upstream commit retrieved successfully
• Patch compatibility tested
• ⚠️ Patch conflicts detected - manual review required

🚀 Next Steps

1. Review the upstream changes above
2. Verify CI pipeline passes with new upstream
3. Test ARM64 build with new CozyStack version
4. Merge when ready

---

This PR was automatically created by the dependency update workflow