fix(rbac): add bind/escalate verbs for k8s install

The Kubernetes install manifests (Helm chart and kustomize base)
lacked the bind/escalate verbs on clusterroles/roles that the
OpenShift manifests already had. Without them, Kubernetes RBAC's
self-escalation check blocks the operator from creating
Pipelines-as-Code's aggregate ClusterRole, so its ServiceAccounts
and Deployments are never created.

Align the Kubernetes RBAC with the OpenShift RBAC by granting
bind/escalate on clusterroles/roles. Verified by reproducing the
failure with the v0.80.0 Helm chart on a kind cluster and confirming
Pipelines-as-Code installs successfully once the verbs are added.

Fixes #3682

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 5 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>

Author: 2 people

charts/tekton-operator/templates/kubernetes-rbac.yaml

@@ -155,6 +155,8 @@ rules:
       - delete
       - list
       - watch
+      - bind
+      - escalate
   - apiGroups:
       - ""
     resources:

config/base/role.yaml

@@ -127,6 +127,8 @@ rules:
   - delete
   - list
   - watch
+  - bind
+  - escalate
 - apiGroups:
   - ""
   resources: