upgrade k8s.io/client-go to v0.36.1 to fix PopBatch single-item race condition

This MR upgrades the Kubernetes dependencies to v0.36 to include an upstream bug fix in k8s.io/client-go that was causing intermittent CI failures in sylvactl watch

The single-object case is exactly what happens in the sylva-units-preview namespace during bootstrap, which explains why the failure was observed there and not during upgrades (where many HelmReleases are watched simultaneously).

k8s.io/api, k8s.io/apimachinery, and sigs.k8s.io/controller-runtime are also bumped with client-go to maintain version alignment

Also, see the discussion here

Upstream fix: Make PopBatch process a single-item batch identically to Pop · kubernetes/kubernetes@b8470bed

Related to sylva-projects/sylva-core#4030 sylva-projects/sylva-core#4026