fix: grant dashboard SA read access to DevWorkspaceOperatorConfig

[akurinnoy]

What does this PR do?

This PR grants the dashboard service account read access to the DWOCp. The dashboard backup feature reads the DWOC to get backup configuration (schedule, registry path, auth secret name). Without this permission, backup API endpoints fail with 403 for all users.

Screenshot/screencast of this PR

What issues does this PR fix or reference?

How to test this PR?

1. Deploy the operator:

OpenShift

./build/scripts/olm/test-catalog-from-sources.sh

or

build/scripts/docker-run.sh /bin/bash -c "
  oc login \
    --token=<...> \
    --server=<...> \
    --insecure-skip-tls-verify=true && \
  build/scripts/olm/test-catalog-from-sources.sh
"

on Minikube

./build/scripts/minikube-tests/test-operator-from-sources.sh

Verify the dashboard SA ClusterRole includes the new rule:

kubectl get clusterrole <namespace>-che-dashboard -o json | jq '.rules[] | select(.apiGroups[] ==
  "controller.devfile.io")'
# Should return: {"apiGroups":["controller.devfile.io"],"resources":["devworkspaceoperatorconfigs"],"verbs":["get"]}

Common Test Scenarios

• Deploy Eclipse Che
• Start an empty workspace
• Open terminal and build/run an image
• Stop a workspace
• Check operator logs for reconciliation errors or infinite reconciliation loops

PR Checklist

As the author of this Pull Request I made sure that:

• The Eclipse Contributor Agreement is valid
• Code produced is complete
• Code builds without errors
• Tests are covering the bugfix
• The repository devfile is up to date and works
• Relevant user documentation updated
• Relevant contributing documentation updated
• CI/CD changes implemented, documented and communicated

Reviewers

Reviewers, please comment how you tested the PR when approving it.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: akurinnoy, dkwon17, rohanKanojia

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[tolusha]

/retest