Add client.ForceOwnership to SSA status patches

Follows idiomatic controller pattern for exclusive status ownership
and defends against edge-case SSA field conflicts.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: guineveresaenger

operator/internal/controller/auto/update_controller.go

@@ -365,7 +365,7 @@ func (rs *reconcileSession) updateStatus(ctx context.Context, obj *autov1alpha1.
 
 	oldRevision := obj.ResourceVersion
 	err := rs.client.Status().Patch(ctx, obj, &applyConfiguration{config: patch},
-		client.FieldOwner(UpdateStatusFieldManager))
+		client.FieldOwner(UpdateStatusFieldManager), client.ForceOwnership)
 	if err != nil {
 		return fmt.Errorf("updating status: %w", err)
 	}

operator/internal/controller/auto/workspace_controller.go

@@ -125,7 +125,7 @@ func (r *WorkspaceReconciler) Reconcile(ctx context.Context, req ctrl.Request) (
 			WithConditions(applyConditions...)
 		patch := autoapply.Workspace(w.Name, w.Namespace).WithStatus(statusApply)
 		err := r.Status().Patch(ctx, w, &applyConfiguration{config: patch},
-			client.FieldOwner(WorkspaceStatusFieldManager))
+			client.FieldOwner(WorkspaceStatusFieldManager), client.ForceOwnership)
 		if err != nil {
 			l.Error(err, "updating status")
 		} else {