Collect new minimal RBAC by Bedrock 4.10

[YCShen1010]

What this PR does / why we need it:
Collect new minimal RBAC required for the full Bedrock installation for both CD and SC2 stream.

Which issue(s) this PR fixes:
Fixes # https://github.ibm.com/IBMPrivateCloud/roadmap/issues/65217

How to test:

1. Using ibm-pak to get and apply the full catalog from latest 4.10.0 CASE and zen catalog
2. install core services

   - name: ibm-im-operator
   - name: ibm-platformui-operator
   - name: ibm-events-operator
   

3. Collect all rules from nss-runtime-managed-role-from-<ns> Role
4. Testing Cluster info: https://console-openshift-console.apps.cutie2.cp.fyre.ibm.com/k8s/ns/tenant1/roles/nss-runtime-managed-role-from-nss-permission/ with w3 ID login

[YCShen1010]

Test result:
Install new CPFS with above min RBAC and create a zen service in tenant name, and the installation process finished completely.

[Daniel-Fan]

/lgtm

[ibm-ci-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Daniel-Fan, YCShen1010

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [Daniel-Fan,YCShen1010]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment