Proposed changes

This PR introduces new functionality for NIC with App Protect. Users can provide app protect policy bundles on a mounted volume.

Introduced updates:

• update the Policy CRD - added new field apBundle of type string
• volume with app protect policy bundle must be mounted at /etc/nginx/waf/bundles/
• NIC (with App Protect) deployment.yaml must include mounted volume, for example:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-ingress
  namespace: nginx-ingress
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nginx-ingress
  template:
    metadata:
      labels:
        app: nginx-ingress
     #annotations:
       #prometheus.io/scrape: "true"
       #prometheus.io/port: "9113"
       #prometheus.io/scheme: http
    spec:
      volumes:
      - name: app-pv
        persistentVolumeClaim:
          claimName: pvc-bundle
      serviceAccountName: nginx-ingress
      automountServiceAccountToken: true
      containers:
      - image: <nginx-plus-nap img>:<tag>
        volumeMounts:
        - name: app-pv
          mountPath: /etc/nginx/waf/bundles
        imagePullPolicy: IfNotPresent
        name: nginx-plus-ingress
...

Checklist

Before creating a PR, run through this checklist and mark each as complete.

• I have read the CONTRIBUTING doc
• I have added tests that prove my fix is effective or that my feature works
• I have checked that all unit tests pass after adding my changes
• I have updated necessary documentation
• I have rebased my branch onto main
• I will ensure my PR is targeting the main branch and pulling from my branch from my own fork