No NetworkPolicies in Helm chart

[raballew]

Description

The Helm chart contains no NetworkPolicy templates. All pods can communicate with all other pods without restriction. Controller (8082), router (8083), and exporter ports have no ingress restrictions.

Suggested Fix

• Add default-deny ingress NetworkPolicy templates
• Create explicit allowlists for controller, router, and exporter ports
• Add egress restrictions for router (needs no outbound)