Add network egress resource (#357)

This change adds a new import resource which enables exposing Netbird
resources as Kubernetes services. This remove the need to add sidecars
to every pod.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Added a new `NetworkEgress` custom resource (`netbird.io/v1alpha1`)
with CRD, schema validation, and status/conditions.
* Extended controller functionality to create egress services and
translate egress rules into import `EndpointSlice` resources; egress
pods now include a kube-egress-forwarder sidecar.
* **Bug Fixes**
* Added missing deep-copy and declarative apply support for the new
`NetworkEgress` API types.
* **Documentation**
* Updated README/API reference and added example manifests for
`NetworkEgress` (including IP/FQDN target usage).
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Signed-off-by: Philip Laine <philip.laine@gmail.com>

charts/netbird-operator/templates/rbac.yaml

@@ -38,6 +38,7 @@ rules:
   - groups
   - networkrouters
   - networkresources
+  - networkegresses
   - sidecarprofiles
   - clusterproxies
   verbs:
@@ -59,6 +60,7 @@ rules:
   - groups/status
   - networkrouters/status
   - networkresources/status
+  - networkregresses/status
   - sidecarprofiles/status
   - clusterproxies/status
   verbs:
@@ -76,19 +78,60 @@ rules:
   - groups/finalizers
   - networkrouters/finalizers
   - networkresources/finalizers
+  - networkegresses/finalizers
   - sidecarprofiles/finalizers
   verbs:
   - update
+- apiGroups:
+  - "discovery.k8s.io"
+  resources:
+  - endpointslices
+  verbs:
+  - get
+  - patch
+  - update
+  - list
+  - watch
+  - create
+  - delete
+- apiGroups:
+  - "rbac.authorization.k8s.io"
+  resources:
+  - roles
+  - rolebindings
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  - serviceaccounts
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
 - apiGroups:
   - ""
   resources:
   - services
   verbs:
   - get
+  - patch
+  - update
   - list
   - watch
-  - update
-  - patch
+  - create
+  - delete
 - apiGroups:
   - ""
   resources:
@@ -197,18 +240,6 @@ metadata:
   labels:
     {{- include "netbird-operator.labels" . | nindent 4 }}
 rules:
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-  - delete
 - apiGroups:
   - coordination.k8s.io
   resources: