fix: ingress tls.hosts to contain only origin/extra dns

What

Removes the loop that adds spec.ingress.hosts to the tls.hosts section in both EKS and GKE ingress templates and ensures TLS certificates only cover the primary DNS name and explicitly configured extra DNS names

Why