feat(catalogs): implement Role and RoleBinding for catalog SA

[mikolajkucinski]

Description

Implement RBAC permissions for Catalog ServiceAccount to manage PluginDefinitions.

Regular organizations:

• Role + RoleBinding for PluginDefinitions in their own namespace only

Greenhouse organization:

• ClusterRole + ClusterRoleBinding for both PluginDefinitions (cluster-wide) and ClusterPluginDefinitions

What type of PR is this? (check all applicable)

• 🍕 Feature
• 🐛 Bug Fix
• 📝 Documentation Update
• 🎨 Style
• 🧑‍💻 Code Refactor
• 🔥 Performance Improvements
• ✅ Test
• 🤖 Build
• 🔁 CI
• 📦 Chore (Release)
• ⏩ Revert

Related Tickets & Documents

• Closes [FEAT] - Creation of ServiceAccount for Org to handle Catalogs #1458

Added tests?

• 👍 yes
• 🙅 no, because they aren't needed
• 🙋 no, because I need help
• Separate ticket for tests # (issue/pr)

Added to documentation?

• 📜 README.md
• 🤝 Documentation pages updated
• 🙅 no documentation needed
• (if applicable) generated OpenAPI docs for CRD changes

Checklist

• My code follows the style guidelines of this project
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• My changes generate no new warnings
• New and existing unit tests pass locally with my changes