Allow users not to create clusterroles and clusterrolebindings in installing KIC

[randmonkey]

From FTI-6416.
The customer wanted to upgrade KIC to 2.12. They want to run KIC to watch only one namespace but clusterrole and clusterrolebinding are created in the installation.

The clusterrole and clusterrolebinding are enabled by default because KIC requires them to watch some cluster scoped resources like customresourcedefinitions for gateway API controllers, but not all controllers of KIC requires watching cluster scoped things. If the customers do not require these feature and do not want to create cluster roles (for example, they do not have the permission to create cluster roles in the cluster), we should allow them to not to create them in generating RBAC resources.