Switch istio ztunnel and cni images to proper registry1 source

[mjnagel]

Describe what should be investigated or refactored

In #1175 we introduced the optional ztunnel and cni components. At the time the registry1 images were non-functional so we added placeholders for the upstream images from dockerhub.

The original issues have now been closed so we should re-test the latest published versions and see if they work now. If they are functioning, we will need to swap them in. If they are non-functional then we should report any additional issues upstream in repo1.

Links to any relevant code

Images to be swapped in (note that we should use the tetrate images as these ones are/will be FIPS compliant):

registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.24.2-tetratefips-v0
registry1.dso.mil/ironbank/tetrate/istio/ztunnel:1.24.2-tetratefips0

Additional context

https://repo1.dso.mil/dsop/tetrate/istio/1.24/ztunnel/-/issues/9

https://repo1.dso.mil/dsop/tetrate/istio/1.24/install-cni/-/issues/11