Add 'watch services' permission to unprivileged example

[marevers]

The unprivileged Kubernetes example is missing the 'watch services' permission which is causing the following error to appear in the logs of all pods:

E0903 10:21:26.617356 2510180 reflector.go:147] k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: unknown (get services)

This PR adds the missing permission to the Cluster Role.

[mariomac]

Thank you for the contribution!

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.01%. Comparing base (9a20dda) to head (75964da).
Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1126      +/-   ##
==========================================
- Coverage   82.03%   82.01%   -0.03%     
==========================================
  Files         140      140              
  Lines       11574    11574              
==========================================
- Hits         9495     9492       -3     
  Misses       1557     1557              
- Partials      522      525       +3     

Flag	Coverage Δ
integration-test	57.20% <ø> (-0.12%)	⬇️
k8s-integration-test	59.16% <ø> (-0.12%)	⬇️
oats-test	36.87% <ø> (-0.02%)	⬇️
unittests	52.31% <ø> (-0.05%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.