fix(e2e): add default catch-all decision to dynamic-config CRD

The dynamic-config E2E profile uses Kubernetes CRDs (config_source: kubernetes)
instead of config/testing/config.e2e.yaml, so the default decision added to
the YAML file was being ignored.

Root cause: E2E tests send model="MoM" which triggers auto-routing, but when
no domain matches, no decision is selected, causing PII detection to be
disabled ("No decision specified, PII detection disabled").

This adds a priority=1 catch-all decision to the CRD that ensures PII detection
is always enabled for unmatched requests, blocking all PII types by default.

Signed-off-by: Yossi Ovadia <[email protected]>

Author: yossiovadia

e2e/profiles/dynamic-config/crds/intelligentroute.yaml

@@ -344,3 +344,20 @@ spec:
             enabled: true
             system_prompt: "You are an engineering expert with knowledge across multiple engineering disciplines including mechanical, electrical, civil, chemical, software, and systems engineering. Apply engineering principles, design methodologies, and problem-solving approaches to provide practical solutions. Consider safety, efficiency, sustainability, and cost-effectiveness in your recommendations. Use technical precision while explaining concepts clearly, and emphasize the importance of proper engineering practices and standards."
             mode: "replace"
+
+    - name: "default_decision"
+      priority: 1
+      description: "Default catch-all decision - blocks all PII for safety"
+      signals:
+        operator: "OR"
+        conditions:
+          - type: "always"
+      modelRefs:
+        - model: "base-model"
+          loraName: "science-expert"
+          useReasoning: false
+      plugins:
+        - type: "pii"
+          configuration:
+            enabled: true
+            pii_types_allowed: []