chore(deps): update dependency kubernetes/kubernetes to v1.36.4

[scality-renovate]

This PR contains the following updates:

Package	Update	Change	Pending
kubernetes/kubernetes	patch	v1.36.3 → v1.36.4	v1.37.0

---

Release Notes

kubernetes/kubernetes (kubernetes/kubernetes)

v1.36.4

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

Dependency Bump Evaluation

Version change: kubernetes/kubernetes v1.36.3 → v1.36.4 (patch)
Scope: devcontainer only (.devcontainer/Dockerfile — kubectl binary version)

Changes in v1.36.4:

• Fix: client-go FakeCustomStore now implements cache.Store interface methods added in v0.36
• Fix: DRA structured allocator shared-counter cache keying bug
• Fix: scheduler preemption race condition (preemptor pod stuck unschedulable)
• Fix: kubelet DRA duplicate CDI device IDs causing container start failure
• Security: updated golang.org/x/{text,net,crypto,sync,sys,term,tools} dependencies

Breaking changes: None

Security concerns: None — the security dependency updates are internal to the Kubernetes binaries; this PR only bumps the kubectl CLI version installed in the devcontainer, not the operator's own Go dependencies.

Impact on codebase: Zero — this changes only the dev tooling version. No production code, Go modules, or operator behavior is affected.

Recommendation: SAFE TO MERGE (once CI is green)

Notes: Cannot auto-approve because the PR author is scality-renovate[bot], not dependabot[bot]. CI checks (generate, lint, test, test-e2e) were still in progress at evaluation time.

— Claude Code