feat: exclude istio-init containers from require-non-root-group

Starting MR with chores done to get a pipeline and the review process going.

Relates #43 (closed)