premises/d8-ugmk-prod: privileged pod-policy on the namespace

Deckhouse admission-policy-engine (baseline) rejected the pods because
istio-init needs NET_ADMIN and NET_RAW. Label the namespace
security.deckhouse.io/pod-policy=privileged like the other app namespaces in
ugmk.

apps/premises/d8-ugmk-prod/kustomization.yaml

@@ -4,6 +4,10 @@ resources:
   - ../base
   - kafka-ca-configmap.yaml
 patches:
+  - path: namespace.yaml
+    target:
+      kind: Namespace
+      name: premises
   - path: backend.yaml
     target:
       kind: HelmRelease

apps/premises/d8-ugmk-prod/namespace.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: premises
+  labels:
+    istio-injection: enabled
+    security.deckhouse.io/pod-policy: privileged