fix(k8s): handle AEC-paused resources properly

This is a follow-up quickfix for #4846.
It reads a specific annotation and checks if it has a special value set by Cloud.
This needs to be changed to reply on a more generic and reliable way of k8s resource comparison.

core/src/plugins/kubernetes/kubernetes-type/handlers.ts

@@ -253,9 +253,16 @@ async function getResourceStatuses({
           metadata: { name: m.name, namespace: m.namespace },
         }
         return { resource: missingResource, state: "missing" } as ResourceStatus
-      } else {
-        return await resolveResourceStatus({ api, namespace, resource, log })
       }
+
+      // Check if AEC has paused the resource
+      const manifestHashAnnotationKey = gardenAnnotationKey("manifest-hash")
+      const manifestHash = resource.metadata?.annotations?.[manifestHashAnnotationKey]
+      if (manifestHash === "paused-by-aec") {
+        return { resource, state: "outdated" } as ResourceStatus
+      }
+
+      return await resolveResourceStatus({ api, namespace, resource, log })
     })
   )
 }