Error from server (Forbidden): policy 'add-default-priority-class-to-workload' with binding 'add-default-priority-class-to-workload-prod' denied request: failed to configure binding: no params found for policy binding with `Deny` parameterNotFoundAction

apiVersion: admissionregistration.k8s.io/v1beta1
kind: MutatingAdmissionPolicy
metadata:
  name: add-default-priority-class-to-workload
spec:
  failurePolicy: Fail
  matchConditions:
  - expression: '!has(object.spec.priorityClassName)'
    name: priority-class-not-present
  matchConstraints:
    resourceRules:
    - apiGroups:
      - ''
      apiVersions:
      - v1
      operations:
      - CREATE
      resources:
      - pods
  mutations:
  - applyConfiguration:
      expression: |-
        Object{
            spec: Object.spec{
                priorityClassName: params.data.defaultPriorityClassName
            }
        }
    patchType: ApplyConfiguration
  paramKind:
    apiVersion: v1
    kind: ConfigMap
  reinvocationPolicy: Never
---
apiVersion: admissionregistration.k8s.io/v1beta1
kind: MutatingAdmissionPolicyBinding
metadata:
  name: add-default-priority-class-to-workload-prod
spec:
  paramRef:
    namespace: kube-system
    name: admission-params-default-priority-class-prod
    parameterNotFoundAction: Deny
  policyName: add-default-priority-class-to-workload
  matchResources:
    matchPolicy: Equivalent
    namespaceSelector:
      matchLabels:
        env: prod
---
apiVersion: v1
data:
  defaultPriorityClassName: prod
kind: ConfigMap
metadata:
  name: admission-params-default-priority-class-prod
  namespace: kube-system
---
apiVersion: scheduling.k8s.io/v1
description: Default for production namespaces
globalDefault: false
kind: PriorityClass
metadata:
  name: prod
value: 1000
---
apiVersion: v1
kind: Namespace
metadata:
  name: prod
  labels:
    env: prod
---
apiVersion: v1
kind: Pod
metadata:
  namespace: prod
spec:
  containers:
  - args:
    - sleep
    - 5d
    image: curlimages/curl:8.6.0
    name: x