Monitor AuthorizationPolicy status and alert if rules we request are not accepted

[ca-scribner]

Enhancement Proposal

Istio has added more detailed status to their Authorization Policies, as designed here. An example is:

Status:                                                  
  Conditions:                                            
    Last Transition Time:  2024-11-19T18:26:18.807648792Z
    Message:               attached to ztunnel           
    Reason:                Accepted                      
    Status:                True                          
    Type:                  ZtunnelAccepted               

When an AuthorizationPolicy is misconfigured (for example, its target does not exist), the Status Conditions will reflect that.

We should inspect these statuses to assess whether our policy configuration is ready. For example, we could do that on update-status or after any policy changes.