Use Case: POC Cloud Run knative container on Anthos Service Mesh (Istio) GKE cluster via Cloud Deploy canary KCC deployment - max coverage / min spanning service tree

Design/implement a POC KCC deployment via Cloud Deploy of a cloud run application on an ASM/Istio (Anthos Service Mesh) GKE cluster.
Add Cloud Armor, CDN, WAF (WAAP https://cloud.google.com/solutions/web-app-and-api-protection), PSC/VPC-SC, Shared-VPC, DNS

## Assets
- branch https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/tree/gh339-cloudrun-asm-canary
- docs

## Diagrams
```mermaid
graph LR;
style Architecture fill:#44f,stroke:#f66,stroke-width:2px,color:#fff,stroke-dasharray: 5 5
%% architecture
cloud-deploy-->canary-pipeline;
cloud-run-->anthos-service-mesh;
anthos-service-mesh-->anthos-gke-cluster;

```

```mermaid
graph TD;
mobile-client-->GFE;
GFE-->L7LB;
Cloud-Armor-->L7LB;
Cloud-CDN-->L7LB;
PSC-->VPC-SC;

```