kyverno-policies release v0.26.0

Added

• Add optional policies for restricting debug access using ephemeral containers.
• Add io.giantswarm.application.audience and io.giantswarm.application.managed chart annotations for Backstage visibility.
• Push to the default catalog.

Changed

• Migrate chart annotations to OCI-compatible format (change application.giantswarm.io/team to io.giantswarm.application.team, convert restrictions to annotations).
• Updated kyverno-policies to upstream version v1.17.2.