Update Kyverno policy to allow serviceAccount automounts to alloy deployments.

Currently the default kyveno policy disables automount of serviceaccount credentials.

This is required for allow to connect to the kubernetes API to query metadata on workloads.