Part of stackabletech/issues#798

• Document each rule
• Check the docs make sense. Rewrite where necessary
• Remove unnecessary permissions
• Attach explanations to PR description
• Run all tests
• Split operator and product roles into separate files Core operators don't have product roles

Removed rules/verbs:

• listeners update removed - No client.update() calls exist in the codebase. All mutation uses apply_patch (SSA) or merge_patch, which only require patch.
• listeners/finalizers entire resource removed - No finalizer management exists in the operator code. The kube-rs Controller does not add finalizers automatically. Added in commit b2559c3 but never used.
• listeners/status create, delete, update removed - Status subresources only need patch (via client.apply_patch_status()). create, delete, and update on a subresource are not meaningful here.
• podlisteners delete, update removed - PodListeners is not in delete_orphaned_resources and there are no client.delete::<PodListeners>() calls. update is unused for the same reason as listeners.