Release 2026.5.28:0 — bump upstream to 2026.5.28 (gh 2.93.0)

[lundog]

Release 2026.5.28:0 — bump upstream to 2026.5.28

Summary

Bumps the bundled OpenClaw upstream from 2026.5.12 → 2026.5.28 and the bundled GitHub CLI from 2.87.3 → 2.93.0, and updates the StartOS package version to 2026.5.28:0 accordingly.

What changed

• Dockerfile — OPENCLAW_VERSION 2026.5.12 → 2026.5.28; GH_VERSION 2.87.3 → 2.93.0. STARTOS_VERSION left untouched (it tracks the host OS, not upstream).
• startos/versions/ — renamed the version file in place: v2026.5.12.1.ts → v2026.5.28.0.ts, with version: '2026.5.28:0' and refreshed releaseNotes (en/es/de/pl/fr). Migrations remain empty — this is a straight upstream bump with no data migration.
• startos/versions/index.ts — current now points at v_2026_5_28_0; other stays [].

Steps followed

1. Updated the Dockerfile build ARGs (versions pinned without the leading v).
2. Bumped the package version by renaming the single file under startos/versions/ to the new version string and updating version + releaseNotes, per CONTRIBUTING.md / UPDATING.md. The build number resets to :0 on a new upstream date.
3. Updated the version graph in index.ts to make the new version current.
4. Scanned for stale references — grep across *.ts, Dockerfile, *.sh, *.md, *.json for the old version strings (2026.5.12, 2.87.3); none remain.

Verification

• tsc --noEmit passes clean.
• No stale 2026.5.12 / 2.87.3 references anywhere in the tree.
• Dockerfile and package version now agree (avoids the binary/package drift that motivated the two-place bump rule in CONTRIBUTING.md).
• Built the .s9pk and installed it on a live StartOS host running v0.4.0-beta.9 — verified the service starts and runs as expected.

Notes

• This follows the repo's established convention of renaming the version file in place with other: [], rather than accumulating prior versions in the graph — a new version file is only warranted for a migration or to preserve old release notes in git history.
• Release notes use the terse house style ("Update to upstream 2026.5.28"); happy to expand into a user-facing changelog summary if preferred.