Ensure unprivileged deployment works

[elevran]

Complementary to work in #77 - ensure ClusterLink works when deployed in a single namespace. Correct RBAC is needed to access the single namespace only. We may want to support a set of related namespace as a single unit (i.e., control and dataplanes support n namespace, with n>1)