Prep release 5.4.3 (#1187) (#1191)

* Prep k8s collection release 5.4.3

* Update release date for 5.4.3

* Update changelog.yaml and changelog.rst mismatches

(cherry picked from commit efe2d1aa69)

changelogs/fragments/1173-security-check-workflow.yml

@@ -1,2 +0,0 @@
-trivial:
-  - ci - add security check workflow to block PRs containing ``.claude/`` or ``.vscode/`` directories (https://github.com/ansible-collections/kubernetes.core/pull/1173).

changelogs/fragments/20260306-k8s_drain-delete-logic-fixes-for-daemonsets.yaml

@@ -1,3 +0,0 @@
----
-bugfixes:
-  - k8s_drain - Fix logic for handling pods with local storage to correctly check for empty_dir volumes in replicated pods and pods managed by DaemonSets (https://github.com/ansible-collections/kubernetes.core/pull/1095).

changelogs/fragments/20260506-improve_idempotency_for_helm_repository.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - helm_repository - correct handling of repository URLs with trailing slashes (https://github.com/ansible-collections/kubernetes.core/pull/1121).

changelogs/fragments/fix-openshift-clients-ee-dependency.yaml

@@ -1,2 +0,0 @@
-bugfixes:
-  - ee - added ``meta/execution-environment.yml`` to decouple ansible-builder EE builds from the ``openshift-clients`` system dependency declared in ``bindep.txt``, which is not available in standard UBI repositories and caused builds to fail with ``No package matches 'openshift-clients'`` (https://github.com/ansible-collections/kubernetes.core/issues/1141).