Function build_scout_cluster_role 

pub fn build_scout_cluster_role() -> ClusterRole

Build the scout ClusterRole with cluster-scoped permissions.

Grants watch/patch/update on Ingresses and Services (kube-rs finalizer patches the main resource metadata to add/remove finalizers), read on DNSZones, and read on Secrets (for remote kubeconfig).