Infra 39554: Update make kyverno/test to use PolicyExceptions

[nabadger]

This MR requires the latest version of kyverno-cli (tested against 1.13.4)

It allows make kyverno/test to be run locally (and in CI), without the need for deploying a k3d/kind cluster (so speeds up jobs).

kyverno-cli now supports passing through --exceptions which means this helper can be run locally.

The change is:

1. Patch ClusterPolicy manifests to remove the .metadata.namespace field. This is an issue with how we generated the rendered manifests with Tanka. This previously was not an issue as the tests were run in a k8s cluster. It's an issue now as the policies do not match as they are namespaced (probably a bug in kyverno...)
2. Combine yaml where required to avoid the need for extra loops
3. Update kyverno apply to pass in --exceptions and also configure the output to --table