Define a Tetragon TracingPolicy to audit file reads on sensitive paths

Verified steps

1. Create a `TracingPolicy` manifest with `apiVersion: cilium.io/v1alpha1` and `kind: TracingPolicy`
2. Under `spec.kprobes`, specify the kernel function to hook (e.g., `security_file_open`) and set `syscall: false`
3. Add an `args` list identifying argument indices that carry the file path and flags fields
4. Add a `selectors` block with a `matchArgs` filter targeting paths under `/etc/` or `/root/` to reduce noise
5. Apply the policy with `kubectl apply` and verify it is loaded with `kubectl get tracingpolicy`
6. Observe generated events with `tetra getevents` or the Tetragon daemonset logs filtered by policy name