fix(macvlan): restart DHCP-attached pods to renew orphaned net1 leases

#1131 restarted cni-dhcp-daemon at 2026-10-06 00:07 UTC. The daemon keeps
leases in memory only, so leases of pods attached before that are no longer
renewed (k8s-1 daemon log knows only mdns-relay). They expire within 24h and
the UDM can re-issue the address: the 2026-07-09 IP conflict again.

A pod-template annotation restarts matter-server, shelly-manager,
music-assistant and mdns-relay; each takes a fresh lease via the running
daemon and the v1.9.1 dhcp plugin (also Hestia's post-#1142 check).

Refs: REN-722
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

kubernetes/apps/home-assistant/mdns-relay-deployment.yaml

@@ -42,6 +42,11 @@ spec:
       labels:
         app.kubernetes.io/name: mdns-relay
       annotations:
+        # Bump to restart the pod and take a fresh DHCP lease for net1. A
+        # cni-dhcp-daemon restart drops the leases it renews (it keeps them
+        # in memory only); pods attached before it lose renewal and their
+        # address returns to the UDM pool (see cni-dhcp-daemon.yaml).
+        homelab.renner.uno/dhcp-lease-renew: "2026-10-06"
         k8s.v1.cni.cncf.io/networks: mdns-relay-iot
     spec:
       enableServiceLinks: false

kubernetes/apps/home-assistant/shelly-manager-deployment.yaml

@@ -25,6 +25,11 @@ spec:
       labels:
         app.kubernetes.io/name: shelly-manager
       annotations:
+        # Bump to restart the pod and take a fresh DHCP lease for net1. A
+        # cni-dhcp-daemon restart drops the leases it renews (it keeps them
+        # in memory only); pods attached before it lose renewal and their
+        # address returns to the UDM pool (see cni-dhcp-daemon.yaml).
+        homelab.renner.uno/dhcp-lease-renew: "2026-10-06"
         # Multus attaches `net1` on v30iot with a DHCP-leased address (see
         # shelly-manager-network-attachment.yaml). The mDNS resolver
         # inside the app needs L2 presence on the IoT VLAN to browse

kubernetes/apps/matter-server/deployment.yaml

@@ -16,6 +16,11 @@ spec:
       labels:
         app.kubernetes.io/name: matter-server
       annotations:
+        # Bump to restart the pod and take a fresh DHCP lease for net1. A
+        # cni-dhcp-daemon restart drops the leases it renews (it keeps them
+        # in memory only); pods attached before it lose renewal and their
+        # address returns to the UDM pool (see cni-dhcp-daemon.yaml).
+        homelab.renner.uno/dhcp-lease-renew: "2026-10-06"
         # Multus attaches a second NIC (net1) on the v30iot VLAN via
         # macvlan (see network-attachment.yaml). Matter device
         # commissioning and discovery need real L2 presence on the IoT

kubernetes/apps/music-assistant/deployment.yaml

@@ -17,6 +17,11 @@ spec:
       labels:
         app.kubernetes.io/name: music-assistant
       annotations:
+        # Bump to restart the pod and take a fresh DHCP lease for net1. A
+        # cni-dhcp-daemon restart drops the leases it renews (it keeps them
+        # in memory only); pods attached before it lose renewal and their
+        # address returns to the UDM pool (see cni-dhcp-daemon.yaml).
+        homelab.renner.uno/dhcp-lease-renew: "2026-10-06"
         # Multus attaches net1 (macvlan on v30iot, DHCP-leased) for direct
         # L2 adjacency to the audio clients (Snapcast / SlimProto /
         # Sendspin) — those protocols sync audio across group members and