fix(thelounge): allow ingress from cilium gateway entity

The previous selector matched an Istio-style label that does not exist
on Cilium gateway pods, which caused default-deny ingress and blocked
access to thelounge. Use fromEntities: ingress to match Cilium's own
gateway/ingress pods, consistent with the cluster repo's webhook CNP.

thelounge/ciliumnetworkpolicy.yaml

@@ -8,15 +8,8 @@ spec:
     matchLabels:
       app.kubernetes.io/name: thelounge
   ingress:
-  - fromEndpoints:
-    - matchLabels:
-        k8s:io.kubernetes.pod.namespace: gateway-system
-        k8s:gateway.networking.k8s.io/gateway-name: external
-    toPorts:
-    - ports:
-      - port: "9000"
-        protocol: TCP
   - fromEntities:
+    - ingress
     - host
     toPorts:
     - ports: