Open Source Maintainers Feeling the Weight of the EU's Cyber Resilience Act