fix ambient regressions with credential secret names, gitrepository...
General MR
Summary
Two ambient regressions detected see issue linked for more details
Changes:
- Ambient auto-enabled Gateway API, Istio CNI, and ztunnel now render their Git credential Secrets.
- Credential Secret names and GitRepository references are normalized to valid Kubernetes names.
- ztunnel-driven ambient mode now enables Istiod’s upstream CNI configuration.
- Added five regression tests in regressions_test.yaml.
Relevant logs/screenshots
n/a
Linked Issue
Closes #3368 (closed)
Upgrade Notices
N/A