Address failing kube-score tests

[perdasilva]

#2393 introduces OPA- and kube-score-based validation of the NetworkPolicy objects. Some of the kube-score tests failed and are deactivated in the lint-deployed-resources make target:

--ignore-test container-resources \
--ignore-test container-image-pull-policy \
--ignore-test container-ephemeral-storage-request-and-limit \
--ignore-test container-security-context-user-group-id

We should decide whether we want to address the issues identified by kube-score. If not, we should check whether we can have the specific issues being ignored (rather than the whole test. Something like nolint: in Go)

Originally posted by @perdasilva in #2393 (comment)

[github-actions]

Issues go stale after 90 days of inactivity. If there is no further activity, the issue will be closed in another 30 days.