Openshift Container Platform istio-cni

Summary

Establish a feature flag, defaulted to false, for Openshift Container Platform (OCP) deployment. OCP requires istio-cni, but with repair turned off. Also fixed hub location for istio-cni container on registry1.

/cc @joshwolf @runyontr @Ozzie100