Add option to replace Cluster Roles by namespaced Roles

[josvazg]

Which component:
Controller Helm Chart

Is your feature request related to a problem? Please describe.

Right now the following capabilities are defined by default as Cluster wide Roles:

• Monitor (get/list/watch) sealed secrets.
• Update sealed secrets' status.
• Fully manage (get/list/create/update/delete/watch) secrets.
• Emit (create/patch) events.

Cluster wide roles are problematic, as not all environments allow end users to rely on them.

For instance, multi-tenant environments do not allow for Cluster Roles or impose important restrictions to include custom permissions as one off special requests.

Describe the solution you'd like

For such environments we want instead the controller to have regular Roles on each of the managed namespaces.

Additional context

This was brought up by #1064 and replaces #1092

[alvneiayu]

solved with #1240