All namespaces with CiliumNetworkPolicies need envoy-gateway-system access now that services are migrating from Istio to Envoy gateway. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>