The OSSM update documentation does not explain how IstioCNI is updated. We should add this. However, because OSSM 3.0 only supports one version of Istio and Istio CNI, updates aren't really possible yet, so we could defer the CNI update docs to OSSM 3.1.