fix(irc): switch AuthorizationPolicies to selector-based for ztunnel L4 enforcement

targetRefs: kind: Service policies require waypoint binding which is not
working in Istio 1.29.2 — WaypointAccepted: False and ztunnel routes
directly to pods bypassing the waypoint. Selector-based policies are
enforced at ztunnel L4 without requiring waypoint.

thelounge/authorizationpolicy.yaml

@@ -4,10 +4,9 @@ metadata:
   name: thelounge
   namespace: irc
 spec:
-  targetRefs:
+  selector:
-  - group: ""
+    matchLabels:
-    kind: Service
+      app.kubernetes.io/name: thelounge
-    name: thelounge
   action: ALLOW
   rules:
   - from:

znc/authorizationpolicy.yaml

@@ -4,12 +4,15 @@ metadata:
   name: znc
   namespace: irc
 spec:
-  targetRefs:
+  selector:
-  - group: ""
+    matchLabels:
-    kind: Service
+      app.kubernetes.io/name: znc
-    name: znc
   action: ALLOW
   rules:
+  - from:
+    - source:
+        namespaces:
+        - irc
   - to:
     - operation:
         ports: