feat(context): grant Kubernetes routing inventory permissions

[MikeNullify]

Collector roles cannot read Gateway API or Istio routing configuration.

• Grant list-only access to GatewayClass, Gateway, HTTPRoute, ReferenceGrant, VirtualService, ServiceEntry and DestinationRule in Helm and both Terraform collector/managed-scan roles.
• Grant get access to the exact API discovery endpoints, including experimental Gateway API metadata without listing experimental objects.
• Include connector fix(iac): grant EC2 instance profile inventory reads #111 through a merge to retain iam:ListInstanceProfiles already required by the monorepo collector.
• Publish chart 0.5.0 with collector 3.48.0 defaults and document collection outcomes and redaction.
• Check routing permissions across all five role templates in CI.

flowchart LR
    C["Customer cluster"] --> R["Scoped ClusterRole<br/>routing permissions added here"]
    R --> I["Collector service account or<br/>managed scan identity"]
    I --> A["List seven routing resource kinds"]

Loading

Collector implementation: https://github.com/Nullify-Platform/nullify/pull/15269.

Merge the collector PR and publish 3.48.0 before merging this chart release. Existing customer installations require an image and RBAC upgrade.
Live cluster collection has not been exercised.