Restrict permissions of Theodolite Kubernetes role

Follow up on #116 (closed). We probably do not need all permissions, we're currently requesting.

added To Do modul/theodolite labels