Sizes resources to the tenant ResourceQuota (500m/4Gi limits, 500m/2Gi requests)
and switches to strategy: Recreate, so the pod no longer depends on the KubePlus
webhook to be admissible and a rollout can actually complete under the quota.
Chart source: py-ailbl-project-integration-pipeline @ 8145494
Adds the partof pod label so the KubePlus allow-external-traffic NetworkPolicy
matches the ML backend pod. Without it the ingress controller is blocked and
every tenant request returns 502.
Chart source: py-ailbl-project-integration-pipeline @ 68d0651
Duc Nguyen