feat: update networkpolicy (#450)

The NetworkPolicy included in the chart appears to apply to the coder agent since individual network policies are created specifically for the workspace pods. We can mutate those network policies, but this should be locked down to only allow necessary inbound/outbound ports. That seems to be none at the moment. It also seems to make sense to make the default locked down completely and override in deployment as necessary.