Changes

ci(lib): inject CI annotations by rewriting pod template (#4193)

Background
yamlFile + yaml overlay does not work reliably in our Jenkins
Declarative setup. Even with yamlMergeStrategy, the annotation snippet
is ignored, so CI annotations never make it into the final Pod.

What this PR does
Update withCiLabels to read the pod template (via readTrusted), merge CI
annotations, and return a full YAML. Pipelines can then use:

yaml pod_label.withCiLabels(POD_TEMPLATE_FILE, REFS)
 (commit: 43334e7)