General pkg/envoyx tweaks and fixes

* Fix invalid RBAC rule unmarshling where rules under resources
  incorrectly set resource references.
* Make reference assumptions not so aggressive where they will
  only apply when missing.
* Add missing skipIf evaluation checks.

server/codegen/schema/resource.cue

@@ -188,6 +188,7 @@ import (
 			supportMappedInput: bool | *true
 			mappedField: string | *""
 		}] | *[]
+		extendedResourceRefIdent: string | *""
 		// enable or disable offloading unhandled nodes onto a custom default decoder
 		defaultDecoder: bool | *false