Currently, the ztunnel is not installed by the Sail Operator, even when the profile is set to ambient in Istio/IstioCNI resources.
After discussing with the team, it was agreed that the best strategy is to implement a dedicated controller to handle the ztunnel daemonSet lifecycle.

Acceptance criteria:

• Create a ztunnel CRD.
• Implement a controller to monitor and manage the ztunnel daemonSet, including installation and removal.
• Develop related unit/integration tests.