feat(ci): add kyverno deployment policies

What

Adding more kyverno policies, this time to cover deployment manifests labels and external secrets. These are used by both GKE and EKS deployment charts.

%{first_multiline_commit}

Why

This is another step in governing more deployment and service chart rendered manifests. ref team#617 (closed)