feat(CON-8768): add LB admission webhook manifests

[prichrd]

This change introduces the k8s manifest changes required to deploy the LB admission webhook alongside the existing CCM deployment. Adds:

• Validation webhook definition
• Self signed issuer for signing the admission server certs
• Serving certs for the admission server
• Service fronting the CCM pod
• Additional container running the admission server within the CCM pod.