An egress-deny policy passes init checks and later leaks telemetry

The pod looked restricted during bootstrap, yet the sidecar changed the eventual egress path after the early validation had already passed.