From Static Rules to Dynamic Intent: Network Policy with Cilium matchExpressions