fix(k8s): add manifest-hash annotations also for upsert operations

previously we added garden manifest-hash only for kubectl apply ops.

This commit makes sure to add the manifest-hash also for upserts.

This enables for more accurate (and quicker) comparison results in
compareDeployedResources for the affected resources.

core/src/plugins/kubernetes/api.ts

@@ -597,6 +597,17 @@ export class KubeApi {
     obj: O
     log: LogEntry
   }) {
+    // Hash the raw input and add as an annotation on each manifest (this is helpful beyond kubectl's own annotation,
+    // because kubectl applies some normalization/transformation that is sometimes difficult to reason about).
+    // Hashing the input prevents "Too long annotation..." errors.
+    if (!obj.metadata.annotations) {
+      obj.metadata.annotations = {}
+    }
+    if (obj.metadata.annotations[gardenAnnotationKey("manifest-hash")]) {
+      delete obj.metadata.annotations[gardenAnnotationKey("manifest-hash")]
+    }
+    obj.metadata.annotations[gardenAnnotationKey("manifest-hash")] = await hashManifest(obj)
+
     const api = this[crudMap[kind].group]
     const name = obj.metadata.name