Validate istioCNI and ztunnel Packages with Gatekeeper

Gatekeeper template will need to be updated to have additional exclusions for ztunnel at least:

42s         Warning   FailedCreate                   daemonset/ztunnel                (combined from similar events): Error creating: admission webhook "validation.gatekeeper.sh" denied the request: [restricted-taint] Global tolerations not allowed for taint {"effect": "NoSchedule", "key": "privileged", "value": "true"}...