Create reencrypt route by default for gateway

[rubenvp8510]

Currently the route for the gateway is passthrough (

tempo-operator/internal/webhooks/tempostack_webhook.go

Line 41 in 748b121

const defaultRouteGatewayTLSTermination = v1alpha1.TLSRouteTerminationTypePassthrough

) by default. Let's switch this to re-encrypt to enable access from outside the cluster (the generated service-cert only allows the internal hostname, i.e. service.svc.cluster.local)