Default `ClusterRole` gets aggregated to view with non-readonly permissions

[dronenb]

The default ClusterRole that is included in this Helm chart has:

reports-server/charts/reports-server/templates/cluster-roles.yaml

Line 8 in cfe0909

rbac.authorization.k8s.io/aggregate-to-view: 'true'

But includes non-readonly verbs. This goes against the user-facing roles.

[dronenb]

Also, since APIServices can be created, this should not be aggregated to edit either...