feat: exclude istio-init containers from require-non-root-group

Excludes istio-init containers from the require-non-root-group policy as they require this to function properly. Fixes #43 (closed).