Set true ai_duo_agent_platform_network_firewall

What does this MR do and why?

Set true ai_duo_agent_platform_network_firewall

Set ai_duo_agent_platform_network_firewall to default_enabled: true and enable application-level network isolation for ambient DAP sessions that uses GitLab's default image

References

https://gitlab.com/gitlab-org/gitlab/-/issues/579100

Screenshots or screen recordings

https://dashboards.gitlab.net/d/duo-workflow-svc-errors-breakdown/f26c27d?orgId=1&from=now-3h&to=now&timezone=utc&var-PROMETHEUS_DS=mimir-runway&var-environment=gprd&var-flow_type=fix_pipeline%2Fv1&var-flow_type=code_review%2Fv1&var-flow_type=convert_to_gitlab_ci&var-flow_type=developer%2Fv1&var-flow_type=sast_fp_detection%2Fv1&var-flow_type=security_analyst_agent%2Fexperimental&var-flow_type=analytics_agent%2Fv1&var-grpc_method=$__all&var-lsp_version=$__all&var-gitlab_version=$__all&var-client_type=node-websocket&var-gitlab_realm=$__all

https://dashboards.gitlab.net/d/duo-workflow-svc-main/duo-workflow-svc3a-overview?orgId=1&from=2025-12-09T08:59:00.000Z&to=now&timezone=utc&var-PROMETHEUS_DS=mimir-runway&var-environment=gprd

Before	After

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.