fix: remove kubelet ConditionPathExists, add daemon-reload

- Remove ConditionPathExists from kubelet service definition as it
  prevents kubelet from starting when managed by kubeadm
- Add systemctl daemon-reload after unmasking in all kubeadm scripts
- Add reset-failed for consistent state cleanup

nixos/kubeadm/modules/k8s-common.nix

@@ -143,8 +143,12 @@ in
 
       systemctl unmask kubelet || true
       systemctl stop kubelet || true
+      systemctl reset-failed kubelet || true
       env -i PATH=/run/current-system/sw/bin:/usr/bin:/bin kubeadm reset -f || true
 
+      systemctl daemon-reload
+      systemctl unmask kubelet || true
+
       env -i PATH=/run/current-system/sw/bin:/usr/bin:/bin kubeadm init \
         --control-plane-endpoint "$vip:6443" \
         --upload-certs \
@@ -204,6 +208,8 @@ in
 
       systemctl unmask kubelet || true
       systemctl stop kubelet || true
+      systemctl reset-failed kubelet || true
+      systemctl daemon-reload
       eval "$1"
     '')
 
@@ -217,6 +223,8 @@ in
 
       systemctl unmask kubelet || true
       systemctl stop kubelet || true
+      systemctl reset-failed kubelet || true
+      systemctl daemon-reload
       eval "$1"
     '')
 
@@ -233,7 +241,6 @@ in
     wantedBy = lib.mkForce [];
     wants = [ "network-online.target" ];
     after = [ "containerd.service" "network-online.target" ];
-    unitConfig.ConditionPathExists = "/var/lib/kubelet/config.yaml";
     serviceConfig = {
       Environment = "KUBELET_CONFIG_ARGS=--config=/var/lib/kubelet/config.yaml";
       EnvironmentFile = [