It's inconsistent with secret-op (which has `secrets.stackable.tech/class`). We should keep supporting the old annotation key for compatibility.