test(scorecard): use role instead of clusterrole for oauth rules

test(scorecard): use role instead of clusterrole for oauth rules #23