[admission] support different kind of workloads other than pods

Currently, there is a single code path in the admission controller which returns immediately if the incoming workload (request kind) is not a pod.

We need two paths:
1. One for pods with the existing logic
2. One for DeaemonSets, Deployments, etc. to add the userinfo annotation or verify the existing annotation