Status HTTP server should be securely protected

Kmesh startup a server for debugging and status query here https://github.com/kmesh-net/kmesh/blob/main/cmd/command/http_server.go. it also allows updating bpf map

It is not secure to have no authz, we should set different policies for different interfaces. We can refer to istio status server to do so.

Start with cmd/command/http_server.go and compare its status server behavior with Istio's status server. Define and verify separate authorization policies for the exposed interfaces, ensuring unauthorized requests cannot update BPF maps; the issue provides no test file, so identify the relevant server tests or add coverage for these policy boundaries.

Written by the indexing model from the issue text.