chore(rbac) add permission to update kongpluginbindings/status

[randmonkey]

What this PR does / why we need it:
Add permissions to update kongpluginbindings/status in RBAC for KongPluginBinding reconcilers to update status.
Which issue this PR fixes

Fixes #

Special notes for your reviewer:

PR Readiness Checklist:

Complete these before marking the PR as ready to review:

• the CHANGELOG.md release notes have been updated to reflect significant changes

[pmalek]

Nice find. How did you spot this? Did you encounter an error somewhere?

[randmonkey]

Nice find. How did you spot this? Did you encounter an error somewhere?

I saw KonnectPluginBinding is reconciled but plugins are not really created in Konnect in writing guide page of KongPluginBinding. After adding logs in reconciler at the place of processing errors in handleControlPlaneRef, I found that the RBAC was not properly configured. Should we add some logs in reconciler when some error happened but no further reconciler error is returned?

[pmalek]

I saw KonnectPluginBinding is reconciled but plugins are not really created in Konnect in writing guide page of KongPluginBinding. After adding logs in reconciler at the place of processing errors in handleControlPlaneRef, I found that the RBAC was not properly configured. Should we add some logs in reconciler when some error happened but no further reconciler error is returned?

Yes, if possible. Ideally we'd add tests that should check that. This is yet another gap in RBAC testing: https://kongstrong.slack.com/archives/C011RQPHDC7/p1728658205054639