Description:
Secret and configmap updates do not trigger a reconcile.
This can impact certificate changes and certain rotation procedures, config updates.

Repro steps:
Since secrets don’t have a spec or generation field, this predicate causes us to ignore any updates to secret keys. Completely replacing the secret will trigger reconciliation, but if someone only updates the secret keys, those changes will be skipped.

https://github.com/envoyproxy/gateway/blob/main/internal/provider/kubernetes/controller.go#L1209