fix: create servicemonitor

[fujin]

Note

Enable webhook, cert-manager, metrics patches, and CA injection in the default kustomization.

• Kustomize config (config/default/kustomization.yaml):
  • Enable resources: ../rbac, ../manager, ../webhook, ../certmanager, and metrics_service.yaml (keep ../crd and ../network-policy commented).
  • Add patches: manager_metrics_patch.yaml, manager_image_pull_policy_patch.yaml, manager_webhook_patch.yaml, and webhook_namespace_selector_patch.yaml targeting Deployment and MutatingWebhookConfiguration.
  • Enable cert-manager CA injection replacements: populate webhook Certificate DNS names from Service, and inject CA into MutatingWebhookConfiguration annotations.

^{Written by Cursor Bugbot for commit 960886a. This will update automatically on new commits. Configure here.}