helm: add cephclusters/finalizers permission for mgr sidecar

The watch-active sidecar reconciles Services and wants to set
blockOwnerDeletion=true in the ownerReference. On clusters with
OwnerReferencesPermissionEnforcement admission controller this
requires the cephclusters/finalizers permission.

Signed-off-by: Manuel Grandeit <m.grandeit@gmail.com>
(cherry picked from commit 4f7ead07ca)

deploy/charts/library/templates/_cluster-role.tpl

@@ -61,6 +61,7 @@ rules:
     resources:
       - cephclients
       - cephclusters
+      - cephclusters/finalizers
       - cephblockpools
       - cephfilesystems
       - cephnfses

deploy/examples/common.yaml

@@ -998,6 +998,7 @@ rules:
     resources:
       - cephclients
       - cephclusters
+      - cephclusters/finalizers
       - cephblockpools
       - cephfilesystems
       - cephnfses