Merge Service labels/annotations instead of replacing them, keep allocated
NodePorts and set TargetPort so steady-state reconciles are no-ops, and drop
the per-reconcile config-reload (running pods never see new config; a config
change rolls the StatefulSet).