sidecar-injector: document namespace creation

The [helm generate](https://preliminary.istio.io/docs/setup/kubernetes/sidecar-injection.html#installing-the-webhook) command yields a template with namespaced resources. These resources require the istio-system namespace to be created else deployments fail. 