Issue title: Connectivity tests fail when run in non `cilium-test` namespace
 Issue body: The connectivity tests consistently fail when run in a namespace other than `cilium-test`:
```
$ ./cilium connectivity test --test-namespace latest
[...]
📋 Test Report
❌ 6/31 tests failed (16/233 actions), 0 tests skipped, 1 scenarios skipped:
Test [client-egress]:
  ❌ client-egress/pod-to-pod/curl-0: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-other-node-848c6d48fb-2hx2n (116.69.203.115:8080)
  ❌ client-egress/pod-to-pod/curl-1: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-same-node-6d78d7f79b-j94j7 (116.69.203.115:8080)
  ❌ client-egress/pod-to-pod/curl-2: latest/client2-8484df99d-cbwj6 (116.69.203.115) -> latest/echo-other-node-848c6d48fb-2hx2n (116.69.203.115:8080)
  ❌ client-egress/pod-to-pod/curl-3: latest/client2-8484df99d-cbwj6 (116.69.203.115) -> latest/echo-same-node-6d78d7f79b-j94j7 (116.69.203.115:8080)
Test [client-egress-expression]:
  ❌ client-egress-expression/pod-to-pod/curl-2: latest/client2-8484df99d-cbwj6 (116.69.203.115) -> latest/echo-other-node-848c6d48fb-2hx2n (116.69.203.115:8080)
  ❌ client-egress-expression/pod-to-pod/curl-3: latest/client2-8484df99d-cbwj6 (116.69.203.115) -> latest/echo-same-node-6d78d7f79b-j94j7 (116.69.203.115:8080)
Test [client-egress-to-echo-service-account]:
  ❌ client-egress-to-echo-service-account/pod-to-pod/curl-0: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-other-node-848c6d48fb-2hx2n (116.69.203.115:8080)
  ❌ client-egress-to-echo-service-account/pod-to-pod/curl-1: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-same-node-6d78d7f79b-j94j7 (116.69.203.115:8080)
Test [client-egress-to-echo-deny]:
  ❌ client-egress-to-echo-deny/pod-to-pod/curl-0: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-other-node-848c6d48fb-2hx2n (116.69.203.115:8080)
  ❌ client-egress-to-echo-deny/pod-to-pod/curl-1: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-same-node-6d78d7f79b-j94j7 (116.69.203.115:8080)
  ❌ client-egress-to-echo-deny/pod-to-pod/curl-2: latest/client2-8484df99d-cbwj6 (116.69.203.115) -> latest/echo-other-node-848c6d48fb-2hx2n (116.69.203.115:8080)
  ❌ client-egress-to-echo-deny/pod-to-pod/curl-3: latest/client2-8484df99d-cbwj6 (116.69.203.115) -> latest/echo-same-node-6d78d7f79b-j94j7 (116.69.203.115:8080)
Test [client-ingress-to-echo-named-port-deny]:
  ❌ client-ingress-to-echo-named-port-deny/pod-to-pod/curl-0: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-other-node-848c6d48fb-2hx2n (116.69.203.115:8080)
  ❌ client-ingress-to-echo-named-port-deny/pod-to-pod/curl-1: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-same-node-6d78d7f79b-j94j7 (116.69.203.115:8080)
Test [client-egress-to-echo-service-account-deny]:
  ❌ client-egress-to-echo-service-account-deny/pod-to-pod/curl-0: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-other-node-848c6d48fb-2hx2n (116.69.203.115:8080)
  ❌ client-egress-to-echo-service-account-deny/pod-to-pod/curl-1: latest/client-594cbbdf44-dt5fj (116.69.203.115) -> latest/echo-same-node-6d78d7f79b-j94j7 (116.69.203.115:8080)
connectivity test failed: 6 tests failed
```
I've rerun with `-p` to pause on the first failure and collected a sysdump: 
[cilium-sysdump-20220926-205342.zip](https://github.com/cilium/cilium-cli/files/9649336/cilium-sysdump-20220926-205342.zip)

This is with Cilium CLI d9371d3dc6dbe9f8d8437bd34ee848d7358ff4e0.

### Investigation

`cilium monitor` shows this is caused by policy drops:
```
xx drop (Policy denied) flow 0x76b6c553 to endpoint 0, ifindex 25, file 2:1188, , identity 4620->34411: 116.69.203.115:52440 -> 116.69.203.115:8080 tcp SYN
```
Looking at the BPF policy map for that endpoint, it is indeed missing a rule to allow on that port:
```
$ ks exec cilium-x6rtv -- cilium bpf policy get -n 705
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   BYTES   PACKETS   
Allow    Ingress     0          ANY          NONE         0       0         
Allow    Ingress     1          ANY          NONE         392     4         
Allow    Egress      15025      53/TCP       NONE         0       0         
Allow    Egress      15025      53/UDP       NONE         0       0         
Allow    Egress      15025      53/SCTP      NONE         0       0
```
Dumping the only CNP in that namespace reveals the issue:
```yaml
W0926 20:54:10.346854  299992 gcp.go:119] WARNING: the gcp auth plugin is deprecated in v1.22+, unavailable in v1.26+; use gcloud instead.
To learn more, consult https://cloud.google.com/blog/products/containers-kubernetes/kubectl-auth-changes-in-gke
apiVersion: v1
items:
- apiVersion: cilium.io/v2
  kind: CiliumNetworkPolicy
  metadata:
    creationTimestamp: "2022-09-26T18:50:44Z"
    generation: 1
    name: client-egress-to-echo
    namespace: c1
    resourceVersion: "37680"
    uid: f4a95476-ed39-473e-bb00-bec11882b02b
  spec:
    egress:
    - toEndpoints:
      - matchLabels:
          any:io.kubernetes.pod.namespace: cilium-test
          any:kind: echo
      toPorts:
      - ports:
        - port: "8080"
          protocol: TCP
    - toEndpoints:
      - matchExpressions:
        - key: any:k8s-app
          operator: In
          values:
          - kube-dns
          - coredns
          - node-local-dns
        - key: any:io.kubernetes.pod.namespace
          operator: In
          values:
          - kube-system
      toPorts:
      - ports:
        - port: "53"
          protocol: ANY
    endpointSelector:
      matchLabels:
        any:kind: client
kind: List
metadata:
  resourceVersion: ""
```

### Root Cause

It seems commit https://github.com/cilium/cilium-cli/commit/fc192b0b62694f362a40eef73df56bb1ccf1895b (and maybe others) added policies with the `cilium-test` hardcoded. I'm not sure what the intent was here given they are CNPs anyway so the namespace is implicit.

cc @sayboras 
 Comments: 
 Comment 0: thanks for highlighting this, I don't think it's intended 💯 
 Comment 1: @sayboras I think you missed some policies as it's still failing with the same policy drops. And I still have the same policy loaded with cilium-test hardcoded. I checked out latest:
```
$ git log -n1
commit e206203241b7e8164195bbc16bf46617ef3928a6 (HEAD -> master, origin/master, origin/HEAD)
Author: Tam Mach <jalvarez@example.org>
Date:   Tue Sep 27 13:07:55 2022 +1000

    test/connectivity: Remove explicit namespace in policy manifest
    
    As the connectivity test can be from another namespace, which is passed
    by --test-namespace CLI flag, we should not have any hard coded namespace
    in all related policy manifests.
    
    Signed-off-by: Tam Mach <jalvarez@example.org>
```
and I ran make already.
 Comment 2: Those maybe?
```
$ git grep cilium-test connectivity/manifests/
connectivity/manifests/client-egress-to-echo-deny.yaml:        io.kubernetes.pod.namespace: cilium-test
connectivity/manifests/client-egress-to-echo-expression.yaml:        io.kubernetes.pod.namespace: cilium-test
connectivity/manifests/client-egress-to-echo-named-port-deny.yaml:        io.kubernetes.pod.namespace: cilium-test
connectivity/manifests/client-egress-to-echo-service-account-deny.yaml:        io.kubernetes.pod.namespace: cilium-test
connectivity/manifests/client-egress-to-echo-service-account.yaml:        io.kubernetes.pod.namespace: cilium-test
connectivity/manifests/client-egress-to-echo.yaml:        io.kubernetes.pod.namespace: cilium-test
```
 Comment 3: Maybe we should convert one of the CI tests to use a test namespace name other than `cilium-test`, so we'll be more likely to catch regressions like this in the future?
 Comment 4: sorry all, I thought I removed the label in match selector before

https://github.com/cilium/cilium-cli/pull/1113
 Comment 5: Actually, we need those dummy labels, so that the value can be updated [dynamically](https://github.com/cilium/cilium-cli/blob/master/connectivity/check/test.go#L240). 

So it could be something else, let me take a deeper look


 Comment 6: @pchaigno this should fix our issue I reckon https://github.com/cilium/cilium-cli/pull/1113
 Comment 7: This should be fixed as part of recent PR.
{'source': 'GithubIssues', 'repo_name_with_owner': 'cilium/cilium-cli', 'issue_id': 1386660711, 'repo_stars': 155.0}