kyverno-app release v0.26.1

Fixed

• Fix the Cilium network policies for a namespace default deny: select the kyverno-plugin pods by their app.kubernetes.io/component: plugin label, add a policy for policy-reporter-ui (API server, DNS, policy-reporter and plugin egress, in-cluster ingress on 8080), and label the hook job pods (crds.migration, webhooksCleanup) so allow-kyverno-hook-jobs-talk-to-apiserver selects them.