fix: link assigned name in activity create summaries for generateName

Activity create summaries linked audit.objectRef.name, which is empty for
resources created with generateName (the assigned name lives in
responseObject.metadata.name). Reading audit.objectRef.name errored with
"no such key: name", so the activity was never produced and the create was
silently missing from the user's activity feed. Confirmed in production for
Connector (create rule) and Domain (update rule).

Key changes:
- Connector, ConnectorAdvertisement, TrafficProtectionPolicy,
  BackendTLSPolicy, Gateway: create-rule summaries link
  responseObject.metadata.name. Update rules are unchanged — objectRef.name
  is always present on updates.
- Domain: guard the requestObject.spec and spec.domainName path segments
  before linking the domain name, on both create and update rules.

Claude-Session: https://claude.ai/code/session_01KnYuL5Pf1R5ysZoxxNkKiu

Author: scotwells

config/milo/activity/policies/backendtlspolicy-policy.yaml

@@ -17,7 +17,7 @@ spec:
     # BackendTLSPolicy creation with spec available
     - name: create
       match: "!audit.user.username.startsWith('system:') && audit.verb == 'create' && has(audit.requestObject.spec)"
-      summary: "{{ actor }} created backend TLS policy {{ link(audit.objectRef.name, audit.objectRef) }}"
+      summary: "{{ actor }} created backend TLS policy {{ link(audit.responseObject.metadata.name, audit.objectRef) }}"
 
     # BackendTLSPolicy creation fallback (no spec)
     - name: create-fallback

config/milo/activity/policies/connector-policy.yaml

@@ -17,7 +17,7 @@ spec:
     # Connector creation with spec available
     - name: create
       match: "!audit.user.username.startsWith('system:') && audit.verb == 'create' && has(audit.requestObject.spec)"
-      summary: "{{ actor }} created connector {{ link(audit.objectRef.name, audit.objectRef) }}"
+      summary: "{{ actor }} created connector {{ link(audit.responseObject.metadata.name, audit.objectRef) }}"
 
     # Connector creation fallback (no spec)
     - name: create-fallback

config/milo/activity/policies/connectoradvertisement-policy.yaml

@@ -18,7 +18,7 @@ spec:
     # ConnectorAdvertisement creation with spec available
     - name: create
       match: "!audit.user.username.startsWith('system:') && audit.verb == 'create' && has(audit.requestObject.spec)"
-      summary: "{{ actor }} created connector advertisement {{ link(audit.objectRef.name, audit.objectRef) }}"
+      summary: "{{ actor }} created connector advertisement {{ link(audit.responseObject.metadata.name, audit.objectRef) }}"
 
     # ConnectorAdvertisement creation fallback (no spec)
     - name: create-fallback

config/milo/activity/policies/domain-policy.yaml

@@ -18,7 +18,7 @@ spec:
     # Domain creation with spec.domainName available - use domain name as display text
     - name: create
       match: "!audit.user.username.startsWith('system:') && audit.verb == 'create' && has(audit.requestObject.spec)"
-      summary: "{{ actor }} created domain {{ link(audit.requestObject.spec.domainName, audit.objectRef) }}"
+      summary: "{{ actor }} created domain {{ has(audit.requestObject.spec) && has(audit.requestObject.spec.domainName) ? link(audit.requestObject.spec.domainName, audit.objectRef) : '' }}"
 
     # Domain creation fallback (no spec)
     - name: create-fallback
@@ -38,7 +38,7 @@ spec:
     # Domain update with spec available - excludes status subresource
     - name: update
       match: "!audit.user.username.startsWith('system:') && audit.verb in ['update', 'patch'] && !has(audit.objectRef.subresource) && has(audit.requestObject.spec)"
-      summary: "{{ actor }} updated domain {{ link(audit.requestObject.spec.domainName, audit.objectRef) }}"
+      summary: "{{ actor }} updated domain {{ has(audit.requestObject.spec) && has(audit.requestObject.spec.domainName) ? link(audit.requestObject.spec.domainName, audit.objectRef) : '' }}"
 
     # Domain update fallback (no spec)
     - name: update-fallback

config/milo/activity/policies/gateway-policy.yaml

@@ -17,7 +17,7 @@ spec:
     # Gateway creation with spec available
     - name: create
       match: "!audit.user.username.startsWith('system:') && audit.verb == 'create' && has(audit.requestObject.spec)"
-      summary: "{{ actor }} created gateway {{ link(audit.objectRef.name, audit.objectRef) }}"
+      summary: "{{ actor }} created gateway {{ link(audit.responseObject.metadata.name, audit.objectRef) }}"
 
     # Gateway creation fallback (no spec)
     - name: create-fallback

config/milo/activity/policies/trafficprotectionpolicy-policy.yaml

@@ -17,7 +17,7 @@ spec:
     # TrafficProtectionPolicy creation with spec available
     - name: create
       match: "!audit.user.username.startsWith('system:') && audit.verb == 'create' && has(audit.requestObject.spec)"
-      summary: "{{ actor }} created traffic protection policy {{ link(audit.objectRef.name, audit.objectRef) }}"
+      summary: "{{ actor }} created traffic protection policy {{ link(audit.responseObject.metadata.name, audit.objectRef) }}"
 
     # TrafficProtectionPolicy creation fallback (no spec)
     - name: create-fallback