nextUpdate and thisUpdate are optional can we guard with `!crl.NextUpdate.IsZero()` _Originally posted by @arkodg in https://github.com/envoyproxy/gateway/pull/7199#discussion_r2479887775_