A Cilium policy rollout looks correct and one namespace still loses traffic

A label cleanup is followed by namespace-specific traffic loss that appears only on a subset of nodes.