Two agentgateway CEL Gotchas: One Fails Open, One Fails Closed

Two CEL authorization gotchas in agentgateway: matchExpressions entries are OR'ed, and llm.requestModel is empty at the traffic phase. One fails open.