[backport-1.5]: NeuVector enforcer pods default CPU limit is not sufficient in protect mode

Issue #2386 (closed) needs to be backported to 1.5.x