fix(cert-manager): Fix default deny policy

Since it's the only egress policy in the namespace, it breaks
cert-manager in general. This patch removes the egress coverage of the
policy and by that unblocks the namespace.