The egress gateway's Envoy config lives as one inline string in the
atenet-egress ConfigMap, which Kustomize can replace but cannot patch
into, so the sdsmint variant is a whole second manifest rather than an
overlay. The flag picks between the two.
deploy_ate_system and deploy_atenet apply whichever manifest the flag
selects. delete_atenet deletes both, because teardown has to clean up an
install made under the other setting and either file may declare
resources the other does not.
atenet-egress-with-sdsmint.yaml starts as a copy of atenet-egress.yaml,
so the flag is a no-op until the two diverge.