kube: alias OCI runtime annotations without underscores

[jiwahn]

Checklist

Ensure you have completed the following checklist for your pull request to be reviewed:

• Certify you wrote the patch or otherwise have the right to pass it on as an open-source patch by signing all
  commits. (git commit -s). (If needed, use git commit -s --amend). The author email must match
  the sign-off email address. See CONTRIBUTING.md
  for more information.
• Referenced issues using Fixes: #00000 in commit message (if applicable)
• Tests have been added/updated (or no tests are needed)
• Documentation has been updated (or no documentation changes are needed)
• All commits pass make validatepr (format/lint checks)
• Release note entered in the section below (or None if no user-facing changes)

Does this PR introduce a user-facing change?

Fixed `podman kube generate` output for OCI runtime annotations with underscores so the generated YAML can be used with `podman kube play`.

Description

Fixes: #26871

podman kube generate could emit OCI runtime annotations such as run.oci.keep_original_groups and run.oci.mount_context_type directly into Pod YAML. Since these keys contain underscores, the generated YAML failed Kubernetes annotation validation when reused with podman kube play.

Use Kubernetes-valid Podman aliases in generated YAML and restore the original OCI runtime annotations during podman kube play, preserving the runtime-facing run.oci.* keys. Hope this makes sense.

[Honny1]

Thanks, I have some comments.