add readonly flag for RBAC -> verbs: ["get", "list", "watch"]

[dimetron]

• [] add readOnlyMode flag to the helm values
• [] add conditional template in cluster role - verbs: ["get", "list", "watch"]
• [] add namespaced flag to restrict tools access to namespace only