refactor: Build RBAC with recommended labels

[adwk67]

Description

Part of: stackabletech/issues#869

• Add missing RBAC labels (service account, role binding)
• use infallible rbac functions (requires factor: add infallible rbac functions operator-rs#1251)
• some label cleanup
• consistent role_name function

N.B. RBAC for the Druid connection is excluded: migrating would rename the Job's ServiceAccount, and the
controller has no validated-cluster pipeline to derive typed identity from.

Definition of Done Checklist

• Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant
• Please make sure all these things are done and tick the boxes

Author

• Changes are OpenShift compatible
• CRD changes approved
• CRD documentation for all fields, following the style guide.
• Helm chart can be installed and deployed operator works
• Integration tests passed (for non trivial changes)
• Changes need to be "offline" compatible
• Links to generated (nightly) docs added
• Release note snippet added

Reviewer

• Code contains useful comments
• Code contains useful logging statements
• (Integration-)Test cases added
• Documentation added or updated. Follows the style guide.
• Changelog updated
• Cargo.toml only contains references to git tags (not specific commits or branches)

Acceptance

• Feature Tracker has been updated
• Proper release label has been added
• Links to generated (nightly) docs added
• Release note snippet added
• Add type/deprecation label & add to the deprecation schedule
• Add type/experimental label & add to the experimental features tracker

[adwk67]

--- PASS: kuttl (320.03s)
    --- PASS: kuttl/harness (0.00s)
        --- PASS: kuttl/harness/smoke_superset-4.1.4_openshift-false (167.33s)
        --- PASS: kuttl/harness/smoke_superset-6.1.0_openshift-false (237.40s)
        --- PASS: kuttl/harness/smoke_superset-6.0.0_openshift-false (152.69s)
PASS