Description
In the new deployer controller, we have the following permission
// +kubebuilder:rbac:groups=kro.run,resources=resourcegraphdefinitions,verbs=list;watch;create;update;patch

We should aim for least required permissions and should remove this one.

Since a lot of tests require that permission, we also need to update them.

Also add documentation on what permissions need to be granted to use the controllers. This is also needed for the other permissions that have been removed or set dynamically in the test environments.

Done Criteria

• Code has been reviewed by other team members
• Analysis of existing tests (Unit and Integration)
• Unit Tests created for new code or existing Unit Tests updated
• Integration Test Suite updated (includes deletion of existing unnecessary Integration Test and/or creation of new ones if required)
• Enduser Documentation updated
• Internal technical Documentation created/updated (if applicable)
• Successful demonstration in Review