Live resource updates

Kubernetes can update CPU, memory, huge-page, unified-cgroup, and OOM settings for running containers and ready pod sandboxes. Stackie validates the complete request before applying it atomically. Invalid or unsupported resource values leave the existing limits unchanged.