Sidecar egress namespace selector incorrect for istiod

The helper used here to create netpol to allow egress to istiod needs to be changed to istio-core to istio-system when deployed with operatorless istio.