Description:

Describe the issue.

Noticed that the AIServiceBackend targets a BackendSecurityPolicy
https://aigateway.envoyproxy.io/docs/api/#aiservicebackendspec

The idiomatic design pattern is for the Policy to target the Backend using targetRefs field
https://gateway-api.sigs.k8s.io/geps/gep-2648/

[optional Relevant Links:]

Any extra documentation required to understand the issue.