UNCLASSIFIED - NO CUI

Adjust ServiceMonitor if ambient is enabled

Sonarqube is still creating ServiceMonitors with tlsConfig mounting sidecar certificates based on the istio.enabled conditional but it should be based on if ambient is enabled.