01f873b773
Gateway API's listeners[].tls.certificateRefs never gets synced to Konnect by the gateway operator in this setup — same working pattern as every other resource here (KongService, KongRoute, ...): a Kong-native CRD, not the Gateway API's own translation.