resourceclaim: copy template annotations before creating claims

The controller reused the annotations map from the shared informer-cached ResourceClaimTemplate and added the pod-claim-name annotation to it, mutating the lister object (documented as immutable) and racing between workers that create claims from the same template.

Copy the annotations with maps.Clone before adding the controller-owned annotation, in both the Pod and PodGroup paths.

Signed-off-by: thc1006 <84045975+thc1006@users.noreply.github.com>