ref(deploy/helm): remove role/rolebinding; update clusterrole

Signed-off-by: Vaughn Dice <[email protected]>

Author: vdice

deploy/helm/templates/clusterrole.yaml

@@ -14,6 +14,8 @@ rules:
   - watch
   - update
 
+# TODO: It seems like runtime-class-manger should only need to modify jobs in its own namespace,
+# i.e. via a namespaced Role. However, RBAC errors result without these clusterrole permissions.
 - apiGroups:
   - batch
   resources: