CNI and NetPol integration tests

[bleggett]

Describe the feature request

As I suggested here: #48651 (comment) - we need to test Istio Ambient against at least 2 CNIs that implement NetPol enforcement differently from each other, to ensure we continue to remain compatible with a wide variety of NetPol-enforcing CNI implementations.

Describe alternatives you've considered

Affected product area (please put an X in all that apply)

[x] Ambient
[ ] Docs
[ ] Dual Stack
[ ] Installation
[x] Networking
[ ] Performance and Scalability
[ ] Extensions and Telemetry
[ ] Security
[ ] Test and Release
[ ] User Experience
[ ] Developer Infrastructure

Affected features (please put an X in all that apply)

[ ] Multi Cluster
[ ] Virtual Machine
[ ] Multi Control Plane

Additional context