feat: support policy-optimizer

[flavio]

Extend the RBAC roles assigned to the policy-server Service Account. Grant access to the resources required by policy-optimizer.

This is required to implement this RFC.

More work has to be done, that's why this is a draft PR filed against a feature branch