Currently, the ztunnel is not installed by the Sail Operator, even when the profile is set to ambient in Istio/IstioCNI resources.
After discussing with the team, it was agreed that the best strategy is to implement a new CRD and dedicated controller to handle the ambient profile installation and configuration.

Acceptance criteria:

• Propose a SEP doc about API changes and new CRD for supporting ambient mode
• Create a ambient or ztunnel CRD.
• Comparing with upstream ambient profile and summarize related components configuration from helm charts or templates.