chore: update CozyStack upstream to v1.6.0

[kingdonb]

🤖 Automated CozyStack Dependency Update

This PR updates our CozyStack upstream release pin.

Changes:

• Release: v1.6.0
• Released: 2026-07-22T15:20:09Z
• Patch compatibility: failure

Changes in v1.6.0 (since v1.5.0)

764e3041 chore(release): promote v1.6.0-rc.4 -> v1.6.0 (#3425)
d3815a4c Merge branch 'main' into release-1.6.0
235d38da Prepare release v1.6.0 (promoted from v1.6.0-rc.4)
706c3f06 fix(release): reuse only an OPEN promote PR, not one in any state (#3424)
55195ded test(e2e): capture previous container logs and stop killing the snapshot (#3346)
baf0158d fix(release): reuse only an OPEN promote PR, not one in any state
d5806eb1 feat(kubernetes-nodes): split worker node pool into its own app (Phase 2, additive) (#3314)
284a17ba fix(release): unblock the v1.6.0 promote on the rc.4 staging tree
d0c0f399 fix(ci): cover every image-ref storage shape in promote, retag and mirror (#3404)
bbfe9f9a fix(backupstrategy-controller): give chBackupClientImage a producer (#3405)
8ea58923 test(mariadb): add MariaDb backup/restore e2e test (#3384)
efa4e41e feat(etcd-operator): bump to v0.5.3 (S3 checksum fix for non-AWS backends) (#3403)
a302bd0d docs(backupstrategy-controller): reframe the migrations-image reuse as a workaround
1f302d0d docs(agents): correct issue ref, mirror claim and example in image-refs
4605bbf3 test(mariadb): pre-clean the backup roundtrip against stale tenant-root state
2829f7a3 docs(mariadb): address review notes on backup example
d1f28220 test(mariadb): add backup/restore round-trip e2e (chainsaw) via example harness
ae946c71 fix(etcd-operator): make CRD vendoring fail loudly on fetch error
b2e17076 fix(kubernetes-nodes): drop dead ephemeralStorage guard, clarify parity scope
326dbe0a test(kubernetes-nodes): cover GPU and kubelet pool shapes in render parity

⚠️ Potential Breaking Changes Detected:

d5806eb1 feat(kubernetes-nodes): split worker node pool into its own app (Phase 2, additive) (#3314)
14af8729 fix(kubernetes): move kubevirt-csi-driver base off quay.io/centos to almalinux
e73ad68a fix(backups): support cnpg-operator with barman plugin (#3313)
9c3bae01 fix(kubernetes): re-pin deleted centos:stream9 digest for kubevirt-csi-driver
a1c135c2 fix(backups): omit empty retentionPolicy from the ObjectStore
02382313 fix(linstor-scheduler): re-vendor to upstream 0.3.1 with native admission webhook (#3201)
1422495b fix(monitoring): do not render users-Job when mode=None (upgrade safety)
9223f2ed feat(agents): block hardwrapped prose in markdown and GitHub bodies (#3297)
395af115 docs(agents): require one continuous line per paragraph
b5d1279c fix(monitoring): make cleanup deletes non-blocking and guard delete scope
0f55a150 fix(ci): catch templated CRDs and APIService-only groups in the API gate (#3184)
7b65cf2a feat(platform): migrate to etcd-operator v1alpha2 (#2859)
9aa045fc feat(ci): gate sizeable API changes behind API-owner review (#3167)
2c8f6b8c fix(clickhouse)!: clean up orphaned keeper and data PVCs on delete (#3057)
fff2e771 fix(seaweedfs)!: clean up orphaned data PVCs and cert/db secrets on tenant module delete (#3092)
f3e55d2b fix(ci): harden API gate against tampering and schema gaps
fa871249 feat(ci): gate sizeable API changes behind API-owner review
22c96d8d fix(kubernetes): default worker disk storageClass to the application storageClass
2587458b fix(qdrant)!: reclaim data PVC by name prefix, not volumeClaimTemplate label
26b3110c fix(etcd): pin etcd image to v3.5.31 for consistent watches
021f6141 feat(kubernetes): propagate remote-accessible LINSTOR StorageClasses to tenant clusters
7801f774 fix(linstor): set controller resource requests and relax liveness probe (#3043)
2b25163a refactor(sdn)!: reshape SecurityGroup into a membership-group model
393b50de fix(tenant): grant watch verb to cleanup Role so pre-delete hook can wait (#2923)
52c20ad1 fix(linstor): set controller resource requests and relax liveness probe
5e7936c8 fix(tenant): replace bitnami/kubectl with maintained clastix image in cleanup hook
0e2e6e19 feat(harbor): bump chart to 1.19.1 (Harbor 2.15.1) (#2966)
24948435 chore(testing): refresh e2e-sandbox tools and base to current upstream (#3010)
a462e687 chore(keycloak): bump Keycloak server to 26.6.3 (#2964)
e3ed42a6 chore(testing): refresh e2e-sandbox tools and base to current upstream

🧪 Pre-flight Checks

• Latest non-prerelease release tag identified
• Patch compatibility tested
  - [ ] ⚠️ Patch conflicts detected - manual review required

🚀 Next Steps

1. Review the upstream changes above
2. Verify CI pipeline passes with new upstream
3. Test ARM64 build with new CozyStack version
4. Merge when ready

---

This PR was automatically created by the dependency update workflow