Generating generic patches for only the required changes

ref: https://github.com/Azure/azure-workload-identity/issues/1312

How can we better handle the scenario in future when new fields are added to the pod spec and ensure the webhook isn't dropping fields that it doesn't know about?

Start by reading the linked issue 1312 and tracing the webhook's handling of pod-spec fields. Define how generic patches should include only required changes while preserving fields the webhook does not know about; done means newly added pod-spec fields are not dropped.

Written by the indexing model from the issue text.