Fix privileged pod security label removal in tailscale-examples namespace

The tailscale-examples namespace's pod-security.kubernetes.io/enforce: privileged
label was being removed shortly after Flux applied it. This was caused by the
sandbox kustomization files having explicit 'namespace:' fields, which triggered
kustomize to auto-generate a namespace resource. When Flux applied this with
commonMetadata labels, it overwrote the namespace labels without the privileged setting.

Fix: Remove 'namespace:' field from all sandbox kustomization.yaml files. The
Flux Kustomization already sets targetNamespace: tailscale-examples, which will
apply the correct namespace to all resources without auto-generating a namespace.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: rajsinghtech

clusters/common/apps/tailscale-examples/sandbox/ds/kustomization.yaml

@@ -1,6 +1,5 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: tailscale-examples
 resources:
   - ./daemonset.yaml

clusters/common/apps/tailscale-examples/sandbox/golink/kustomization.yaml

@@ -1,7 +1,6 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: tailscale-examples
 resources:
   - ./deployment.yaml
   - ./service.yaml

clusters/common/apps/tailscale-examples/sandbox/kustomization.yaml

@@ -1,7 +1,6 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: tailscale-examples
 resources:
   # - ./derper
   # - ./hello

clusters/common/apps/tailscale-examples/sandbox/proxyt/kustomization.yaml

@@ -1,7 +1,6 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: tailscale-examples
 resources:
   - ./deployment.yaml
   - ./service.yaml

clusters/common/apps/tailscale-examples/sandbox/sidecar/kustomization.yaml

@@ -1,7 +1,6 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: tailscale-examples
 resources:
   - ./ts-sidecar.yaml
   - ./ts-sidecar-userspace.yaml

clusters/common/apps/tailscale-examples/sandbox/tsdnsproxy/kustomization.yaml

@@ -1,6 +1,5 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: tailscale-examples
 resources:
   - ./deployment.yaml

clusters/common/apps/tailscale-examples/sandbox/tsflow/kustomization.yaml

@@ -1,7 +1,6 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: tailscale
 resources:
   - deployment.yaml
   - service.yaml

clusters/common/apps/tailscale-examples/sandbox/tsidp/kustomization.yaml

@@ -1,7 +1,6 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: tailscale
 resources:
   - manifest.yaml
   - egress.yaml