🤖 ci: include CRD and RBAC directories in freshness diff

Codex review identified that the freshness check only diffed the installer bundle and
kustomization files, which could miss stale generated CRD/RBAC source manifests.
This update now diffs `config/crd/bases/` and `config/rbac/` directories directly.

---

_Generated with `mux` • Model: `openai:gpt-5.3-codex` • Thinking: `xhigh` • Cost: `$0.82`_

<!-- mux-attribution: model=openai:gpt-5.3-codex thinking=xhigh costs=0.82 -->

Author: ThomasK33

.github/workflows/ci.yaml

@@ -149,8 +149,8 @@ jobs:
           make build-installer
           git diff --exit-code -- \
             dist/install.yaml \
-            config/crd/bases/kustomization.yaml \
-            config/rbac/kustomization.yaml
+            config/crd/bases/ \
+            config/rbac/
 
   scan-fs:
     name: Trivy filesystem scan