Reduce konnector permissions

Currently, konnector runs as:
```
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
 name: kube-bind-konnector
rules:
- apiGroups:
 - "*"
 resources:
 - "*"
 verbs:
 - "*"
```

We need to investigate how to make it less privileged. Potentially only in specific namespaces, and resources. 