SKIP UPGRADE Testin things

General MR

Summary

Using upstream recommended template to exclude resources to exlude all istio-init containers from require-non-root-group ClusterPolicy

https://kyverno.io/docs/writing-policies/exceptions/

Also disabling wait-for-ready job as I tried several settings to tune the job but doesn't seem to provide much use anymore.

Relates #43 (closed) #51 (closed)

chart/templates/exception-require-non-root-group.yaml

 {{- $name := "require-non-root-group" }}
-{{- if and .Values.enabled (dig $name "enabled" false .Values.policies) }}
+{{- if and .Values.enabled (dig $name "enabled" false .Values.policies) .Values.istio.enabled }}
 apiVersion: kyverno.io/v2alpha1
 kind: PolicyException
 metadata: