existing tests only use gk for enforcement, we should create new tests that generate VAP. this should be scoped to CEL policies and k8s > 1.30+