Some of monitoring's netpols need helm hook annotations

Motivation

Reported by @jrb:

I've noticed that the monitoring-monitoring-kube-admission-create hook is failing with the monitoring chart when upgrading to big bang 3.6.0. It looks like the job is unable to communicate with apiserver, presumably because the netpol for apiserver communication was removed (I haven't looked too closely at this, but the diff looks suspect). Luckily it does eventually succeed on retry despite the failing job, but there's definitely something wrong. I saw this behavior on all 6 clusters I upgraded today.

Acceptance Criteria

• Any resources created by the monitoring chart that need netpols and are themselves part of helm hooks must have those same helm hook annotations applied to the necessary netpols