chore(deps): bump k8s.io/kubernetes in the go-dependencies group

[mbevc1]

Bumps the go-dependencies group with 1 update: k8s.io/kubernetes.

Updates k8s.io/kubernetes from 1.35.4 to 1.36.0

• Release notes
• Commits

Fixes: #878

[claude]

Claude finished @mbevc1's task in 4m 4s —— View job

---

PR Review: k8s.io/kubernetes bump v1.35.4 → v1.36.0

• Run static analysis (build, vet, mod tidy)
• Review go.mod changes
• Review go.sum changes
• Post review summary

Static Analysis

All three checks pass cleanly:

• go build ./... — compiles successfully
• go vet ./... — no issues
• go mod tidy && git diff --exit-code go.mod go.sum — no drift

Review

Changes are straightforward and correct. This is a clean bump of the k8s.io/kubernetes dependency from v1.35.4 to v1.36.0, along with all associated staging modules. Key observations:

1. All 33 replace directives updated consistently — every k8s.io/* staging module moved from v0.35.0 to v0.36.0, and the new k8s.io/streaming v0.36.0 module (introduced in k8s 1.36) has both a require and matching replace directive.

2. Removed dependency: github.com/mxk/go-flowrate — dropped upstream by k8s 1.36; correctly removed here.

3. google.golang.org/protobuf pseudo-version — acknowledged by the author as acceptable. This is pulled in transitively by k8s 1.36.

4. Transitive bumps look routine — onsi/ginkgo, onsi/gomega, google/pprof, klog/v2, konnectivity-client, structured-merge-diff all moved to newer versions consistent with the k8s 1.36 dependency tree.

5. Follow-up commits address prior review feedback — the k8s.io/streaming replace directive (685e417) and a missing dep bump (a255888) were added in separate commits.

No bugs, security concerns, or issues found. LGTM.