fix: netpol selector correction for ingress to pg-cluster

[Racer159]

Description

The netpol selector for ingress to the default pg cluster is incorrect - this can be worked around with remoteGenerated Anywhere but more scoped netpols will fail.

Related Issue

Fixes #N/A

Type of change

• [X] Bug fix (non-breaking change which fixes an issue)
• [ ] New feature (non-breaking change which adds functionality)
• [ ] Other (security config, docs update, etc)

Checklist before merging

• [X] Test, docs, adr added or updated as needed
• [X] Contributor Guide Steps followed