feat: add remote debug support

[landerss1]

This PR adds support for remote debugging using telepresence and mirrord. It will

• Create a new namespace named ambassador for Telepresence and deploy the traffic manager to it
• Modify gatekeeper namespace exclusions, constraints and mutations to allow telepresence and mirrord
• Modify network policies to allow required traffic

[phillebaba]

Just so that we are aware this change will open up tenant namespaces to a lot of permissions.