Implement in-place Pod image update

[AllenXu93]

Summary

• Add GREP-292 for in-place Pod image updates
• Add InPlaceIfPossible and InPlaceOnly update strategies
• Patch eligible Pod container images in place and advance the Grove template hash after kubelet reports completion
• Add readiness gate handling, fallback/block behavior, CRD schema updates, and focused unit tests

Validation

• make --directory=operator/api generate
• go test ./internal/controller/common/component/utils ./internal/controller/podclique/components/pod
• go test ./...
• make verify-toc

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.