Update to isbot@5

[brophdawg11]

See remix-run/remix#8841 (comment)

We originally supported isbot@3 in v2. Then they released v4 with. breaking changes, so in order to avoid a major remix bump we have to detect the v3 or v4 API.

Now they've released v5. Honestly it would be awesome if we could get rid of it from our code entirely - but the only realistic way to do that would be to have our default entry.server not do the bot detection at all and always use onShellReady which goes against React's recommendations.

At the very least, let's just pin our install to use v5 (locked) and make a note about it in the upgrade guide.

[brophdawg11]

PR #11770

[github-actions]

🤖 Hello there,

We just published version 6.28.2-pre.0 which involves this issue. If you'd like to take it for a test run please try it out and let us know what you think!

Thanks!