feat(agent): add object selector for pod webhook

[ebaron]

Welcome to Cryostat! 👋

Before contributing, make sure you have:

• Read the contributing guidelines
• Linked a relevant issue which this PR resolves
• Linked any other relevant issues, PR's, or documentation, if any
• Resolved all conflicts, if any
• Rebased your branch PR on top of the latest upstream main branch
• Attached at least one of the following labels to the PR: [chore, ci, docs, feat, fix, test]
• Signed all commits: git commit -S -m "YOUR_COMMIT_MESSAGE"

---

Fixes: #993

Description of the change:

• Patches the MutatingWebhookConfiguration with an object selector that causes the pod webhook to only be invoked if it contains the required cryostat.io/name and cryostat.io/namespace labels

Motivation for the change:

• Increases performance by using Kubernetes to perform server-side filtering so our webhook isn't invoked upon every pod creation event in the cluster

How to manually test:

1. Deploy PR and create a default CR
2. make sample_app, there should be no log messages from pod-webhook. If the filtering didn't work, we would see the new "pod is missing required labels" log message.
3. make sample_app_agent_injected. You should see a pod-webhook log message like "configured Cryostat agent for pod" and the sample app should be properly instrumented

[ebaron]

/build_test

[github-actions]

/build_test completed successfully ✅.
View Actions Run.