chore(module): add SecurityPolicyExceptions for Pods

[diafour]

Description

Add exceptions for all Pods that require more permissions than provided by the PSS "Restricted":

• ds/virt-handler
• ds/virtualization-dra
• ds/vm-route-forge

Why do we need it, and what problem does it solve?

Deckhouse now supports per-pod exceptions for security policies using SecurityPolicyException resources.

What is the expected result?

• Module works correctly with enabled security checks for d8-virtualization namespace.
• gatekeeper-audit has no complaints in logs about Pods in d8-virtualization namespace.

Checklist

• The code is covered by unit tests.
• e2e tests passed.
• Documentation updated according to the changes.
• Changes were tested in the Kubernetes cluster manually.

Changelog entries

section: module
type: chore
summary: Add SecurityPolicyExceptions for module Pods with extended permissions (ds/virt-handler, ds/virtualization-dra, ds/vm-route-forge).