Mutate takes AdmissionReview and replaces AdmissionReview.Request $var with supplied values (although this can replace ${var} as well, it won't play nicely with json payload).

Manifest is needed, so we don't replace values in metadata["managedFields"] and so on.