chore: bump kobe to v0.58.0

[jleni]

Summary

• Bumps kobe workspace version to v0.58.0.

Minor rather than patch: rotating a mounted Secret now reaches a Sandbox, and
kobe exec / kobe logs take an optional lease.

What is in this release

PR	Change
#397 · #398	rotating a template.files Secret refills warm members
#395	exec and logs pick a lease when you do not name one
#394	failure-backoff gate extended past instance
#391 · #392 · #400	three CI flakes, with root causes
#396 · #399	docs

Validation

main at e6caeb5 passed the full conformance matrix — k3s, k0s,
vcluster, vkobe-etcd, vkobe-kine — plus Rust Checks, Kani and both contract
legs (run 36242610277).

That matters here: #397 deletes capacity and #394 changes behaviour in three
reconcilers, and neither had run against a cluster until this.

Release plan

• Squash after CI is green.
• From synced main, just release.
• Rewrite the generated notes before reporting it done.