A platform engineer maintains all workload definitions in a Git repository as YAML manifests. They want to create resources that do not yet exist and update resources that do, while preserving fields that other controllers or admins may have set on the live objects. They also want the tooling to track changes over successive runs. Which kubectl command best fits this declarative workflow?