feat: Apply Intermediate TLS defaults on API fallback and handle transient errors

[ugiordan]

What this PR does / why we need it:

Follow-up to #6567. Fixes two issues in the TLS profile integration:

1. Else-only pattern: NewTLSConfigFromProfile was only called in the success branch of the TLS profile fetch. On any error path (non-OpenShift cluster, resource not found), no TLS config was applied, leaving the operator running with Go's bare defaults (no MinVersion, no cipher restrictions). This PR moves NewTLSConfigFromProfile outside the if/else and explicitly falls back to configv1.TLSProfiles[TLSProfileIntermediateType] on all error paths.

2. No transient error handling: The error switch only handled IsNotFound and IsNoMatchError. Transient API errors (ServiceUnavailable, Timeout, TooManyRequests) hit the default case and crashed the operator with os.Exit(1). This PR adds a dedicated case for these errors with a graceful Intermediate fallback. tlsProfileFetched is set to true so the SecurityProfileWatcher self-heals when the API recovers.

Additionally:

• Adds a 10-second context timeout on bootstrap API calls (previously used context.Background() with no deadline).
• Applies the same transient error handling to the TLS adherence policy fetch.

Which issue(s) this PR fixes:

Follow-up to #6567.

Checks

• I've made sure the tests are passing.
• My commits are signed off (git commit -s)
• My PR title follows conventional commits format

Testing Strategy

• Manual tests
• Testing is not required for this change

Misc

The operator Go module builds cleanly with go build ./... from infra/feast-operator/.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 90.00000% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 46.01%. Comparing base (14e0a83) to head (c7b9f67).
⚠️ Report is 1 commits behind head on master.

Files with missing lines	Patch %	Lines
sdk/python/feast/metrics.py	0.00%	1 Missing ⚠️
.../feast/permissions/auth/kubernetes_token_parser.py	94.73%	1 Missing ⚠️
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #6587      +/-   ##
==========================================
- Coverage   46.02%   46.01%   -0.02%     
==========================================
  Files         402      406       +4     
  Lines       47656    48175     +519     
  Branches     6741     6816      +75     
==========================================
+ Hits        21936    22166     +230     
- Misses      24196    24463     +267     
- Partials     1524     1546      +22     

Flag	Coverage Δ
go-feature-server	30.58% <ø> (ø)
python-unit	47.33% <90.00%> (-0.04%)	⬇️

Files with missing lines	Coverage Δ
sdk/python/feast/metrics.py	74.47% <0.00%> (-0.53%)	⬇️
.../feast/permissions/auth/kubernetes_token_parser.py	41.00% <94.73%> (+2.90%)	⬆️

... and 7 files with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 14e0a83...c7b9f67. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.