[Action Platform PAR] Use actionsAllowlist to configure RBAC

[xornivore]

What this PR does / why we need it:

Simplified user configuration for Private Action Runner RBAC in ClusterRole that uses the following:

• Uses explicitly set RBAC rules in kubernetesPermissions
• Additively configures RBAC rules based on the contents of actionsAllowList.

How to test:

• In values add or uncomment com.datadoghq.kubernetes.apps.updateDeployment in actionsAllowlist
• Render the helm chart with helm template ./

Expected ClusterRole:

# Source: private-action-runner/templates/role.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  namespace: process
  name:  "private-action-runner-default-role"
rules:
- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - list
  - get
- apiGroups:
  - apps
  resources:
  - deployments
  verbs:
  - list
  - get
- apiGroups:
  - apps
  resources:
  - deployment
  verbs:
  - update
---

Note that this is implementation is currently limited to the following actions from actionsAllowlist:

• getDeployment
• listDeployment
• patchDeployment
• restartDeployment

Special notes for your reviewer:

Checklist

[Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields.]

• Chart Version bumped
• Documentation has been updated with helm-docs (run: .github/helm-docs.sh)
• CHANGELOG.md has been updated
• Variables are documented in the README.md
• For Datadog Operator chart or value changes update the test baselines (run: make update-test-baselines)

[clamoriniere]

It depends how much granularity you want, but maybe get and list can be define together. Same for patch and update

[dd-gplassard]

restartDeployment is actually using patch under the hood

[dd-gplassard]

can you merge / rebase from main ? there was another release in the meantime