fix: add karpenter do-not-disrupt annotation to pod templates

Pre-init Job pods and StatefulSet pods were being evicted by
Karpenter node consolidation, causing immediate Job failure with
backoffLimit: 0. Add karpenter.sh/do-not-disrupt annotation to
both pod templates to prevent eviction during bootstrap and
normal operation.

Author: bdchatham

internal/controller/node/job.go

@@ -35,8 +35,13 @@ func generatePreInitJob(node *seiv1alpha1.SeiNode, platform PlatformConfig) *bat
 			BackoffLimit:            ptr.To(int32(0)),
 			TTLSecondsAfterFinished: ptr.To(int32(3600)),
 			Template: corev1.PodTemplateSpec{
-				ObjectMeta: metav1.ObjectMeta{Labels: labels},
-				Spec:       buildPreInitPodSpec(node, snap, platform),
+				ObjectMeta: metav1.ObjectMeta{
+					Labels: labels,
+					Annotations: map[string]string{
+						"karpenter.sh/do-not-disrupt": "true",
+					},
+				},
+				Spec: buildPreInitPodSpec(node, snap, platform),
 			},
 		},
 	}

internal/controller/node/resources.go

@@ -33,8 +33,13 @@ func generateNodeStatefulSet(node *seiv1alpha1.SeiNode, platform PlatformConfig)
 				MatchLabels: labels,
 			},
 			Template: corev1.PodTemplateSpec{
-				ObjectMeta: metav1.ObjectMeta{Labels: labels},
-				Spec:       buildNodePodSpec(node, platform),
+				ObjectMeta: metav1.ObjectMeta{
+					Labels: labels,
+					Annotations: map[string]string{
+						"karpenter.sh/do-not-disrupt": "true",
+					},
+				},
+				Spec: buildNodePodSpec(node, platform),
 			},
 		},
 	}