Implement direct controller for NetworkSecurityInterceptEndpointGroup

[codebot-robot]

Please implement the Phase 2 (Controller and E2E Tests) for NetworkSecurityInterceptEndpointGroup by following these two skills:

1. Controller Scaffolding & Mappers: Follow .gemini/skills/kcc-direct-controller-implementer/SKILL.md

   • resource_kind: NetworkSecurityInterceptEndpointGroup
   • package_path: pkg/controller/direct/networksecurity/interceptendpointgroup/
   • proto_package: google.cloud.networksecurity.v1

2. Controller Logic & E2E Fixtures: Follow .gemini/skills/kcc-direct-controller-logic-implementer/SKILL.md

   • resource_kind: NetworkSecurityInterceptEndpointGroup
   • service_name: networksecurity
   • api_version: v1alpha1

3. Verify/Add Identity Tests:

   • Check if apis/networksecurity/v1alpha1/interceptendpointgroup_identity_test.go exists.
   • If it is missing (or incomplete), implement it now to ensure full coverage of the IdentityV2 interface.

If you find any shortcomings in the skills, you may update their respective SKILL.md files. For service-specific observations, MockGCP alignment issues, or GCP SDK quirks, use .gemini/journals/networksecurity.md as described in the kcc-agentic-journaler skill to avoid merge conflicts.

4. Create PR:
   • create a Pull Request with your changes using the send-pr skill.
   • pass the issue labels to the send-pr.sh script using the --labels flag (e.g. --labels "overseer,area/direct,priority/medium,step/gen-types,greenfield,chore/ai").
   • apply the same labels to the PR as are on this issue.
   • include a link to the chore file (.agents/greenfield-direct-controller.md) in the PR description.
   • include Fixes #<issue-number> in the PR description.

[codebot-robot]

Overseer: Triggered 'fix-issue' task.

[codebot-robot]

Overseer: Triggered 'fix-issue' task. Progress can be tracked in sandbox kcc-issue-8817.

[codebot-robot]

Overseer: Assigned task 'fix-issue' to address this issue.