The self-hosted GitHub Actions runner SA needs pod list/get and
pods/exec permissions in kube-system to deploy plugin files to
Headlamp during E2E tests. Without this, the deploy step fails
with a 403 Forbidden error.
A cluster admin must apply this manifest to unblock E2E.
Co-Authored-By: Paperclip <noreply@paperclip.ing>