operator: generate deepcopy, rbac and crds

This commit adds the controller-gen tool as a Bazel dep and adds the
equivalent of `make manifests` to //:generate.

Rename CRDs in the operator Helm chart to match kubebuilder v4 generated
names and add a generation directive to output CRD resources directly
into the Helm chart. CRDs are not templated, so we don't need to helmify
them.

Split the manager-rbac.yaml into a role.yaml and a rolebinding.yaml, and
add a directive to generate role.yaml from operator sources. We're
losing the labels on the role, but that is only a cosmetic defect.

Author: burgerdev

bazel/ci/BUILD.bazel

@@ -337,10 +337,12 @@ sh_template(
         "//internal/attestation/measurements/measurement-generator",
         "//internal/versions/hash-generator",
         "@go_sdk//:bin/go",
+        "@io_k8s_sigs_controller_tools//cmd/controller-gen",
         "@org_golang_x_tools//cmd/stringer",
         "@yq_toolchains//:resolved_toolchain",
     ],
     substitutions = {
+        "@@CONTROLLER_GEN@@": "$(rootpath @io_k8s_sigs_controller_tools//cmd/controller-gen)",
         "@@DOCGEN@@": "$(rootpath :com_github_siderolabs_talos_hack_docgen)",
         "@@GO@@": "$(rootpath @go_sdk//:bin/go)",
         "@@HASH_GENERATOR@@": "$(rootpath //internal/versions/hash-generator:hash-generator)",

bazel/ci/go_generate.sh.in

@@ -25,6 +25,8 @@ measurement_generator=$(realpath @@MEASUREMENT_GENERATOR@@)
 stat "${measurement_generator}" >> /dev/null
 yq=$(realpath @@YQ@@)
 stat "${yq}" >> /dev/null
+controller_gen=$(realpath @@CONTROLLER_GEN@@)
+stat "${controller_gen}" >> /dev/null
 
 cd "${BUILD_WORKSPACE_DIRECTORY}"
 
@@ -37,6 +39,7 @@ PATH=$(dirname "${helm}"):${PATH}
 PATH=$(dirname "${hash_generator}"):${PATH}
 PATH=$(dirname "${measurement_generator}"):${PATH}
 PATH=$(dirname "${yq}"):${PATH}
+PATH=$(dirname "${controller_gen}"):${PATH}
 export PATH
 
 submodules=$(${go} list -f '{{.Dir}}' -m)