Update OSCAL/Validations to handle ambient mesh/workloads for Istio

[mjnagel]

Related to #681

Our current OSCAL/Validations check for a sidecar on every workload and a specific label for istio injection. With the switch to Ambient sidecars will not be present on all workloads. The validation should be updated to handle both sidecar and ambient workloads, and allow for either to pass the validation.

Changes will end up being to these:

• https://github.com/defenseunicorns/uds-core/tree/main/compliance/validations/istio/all-pods-istio-injected
• https://github.com/defenseunicorns/uds-core/tree/main/compliance/validations/istio/all-namespaces-istio-injected