feat: add option to disable ClusterRoles

[aledegano]

This is needed in those clusters were Renku admins have permissions in the namespace in which Renkulab is deployed, but not over the whole cluster and thus cannot create resources that are cluster-wide.