Namespaces have istio deny

Description

Update namespaces have istio constraint to deny

Remaining Violations

I did not include the default namespace into the exceptions because we do not deploy anything into that namespace

  totalViolations: 1
  violations:
  - enforcementAction: dryrun
    kind: Namespace
    message: 'you must provide labels: {"istio-injection"}'
    name: default

#49