Add ServiceAccounts, Roles and RoleBindings

A ServiceAccounts is required if Theodolite is executed inside Kubernetes (i.e. as a pod) and RBAC is enabled. A Role and a RoleBinding are required for specifying the permissions of this ServiceAccount. For better ease-of-use, we should provide these resources.