chore: Narrower CP4I permissions

[nastacio]

Contributes to: #128

Description of changes:

• User narrower security permissions for CP4I

Output of argocd app list command or screenshot of the ArgoCD Application synchronization window showing successful application of changes in this branch.

argocd app get cp4i-app
Name:               cp4i-app
Project:            default
Server:             https://kubernetes.default.svc/
Namespace:          cp4i
URL:                https://openshift-gitops-server-openshift-gitops.gitops-128-cp4i-roles-1e3af63cfd19e855098d645120e18baf-0000.us-south.containers.appdomain.cloud/applications/cp4i-app
Repo:               https://github.com/IBM/cloudpak-gitops
Target:             128-cp4i-roles
Path:               config/argocd-cloudpaks/cp4i
SyncWindow:         Sync Allowed
Sync Policy:        Automated (Prune)
Sync Status:        Synced to 128-cp4i-roles (e42a3c8)
Health Status:      Healthy

GROUP        KIND         NAMESPACE         NAME                  STATUS     HEALTH   HOOK     MESSAGE
batch        Job          openshift-gitops  cp4i-storage-classes  Succeeded           PreSync  job.batch/cp4i-storage-classes created
argoproj.io  Application  openshift-gitops  cp4i-operators        Synced     Healthy           application.argoproj.io/cp4i-operators configured
argoproj.io  Application  openshift-gitops  cp4i-app              Synced                       application.argoproj.io/cp4i-app configured
argoproj.io  Application  openshift-gitops  cp4i-resources        Synced     Healthy           application.argoproj.io/cp4i-resources configured