Document NetworkPolicies needed to secure namespaces

A NetworkPolicy is needed in each namespace to prevent pods from accessing IP addresses outside the cluster without going through the egress gateway since Istio allows connection to IPs without a ServiceEntry even when only allowing access to points in the mesh