OCPBUGS-31351: Minimize wildcard privileges for nodes and namespaces

- Restricted wildcard namespace permissions exclusively to operand namespace.
- Scoped node permissions to readonly to enable infromer watches.

manifests/0000_70_dns-operator_00-cluster-role.yaml

@@ -39,8 +39,25 @@ rules:
   - configmaps
   - endpoints
   - pods
+  verbs:
+  - "*"
+
+- apiGroups:
+  - ""
+  resources:
   - nodes
   verbs:
+  - get
+  - list
+  - watch
+
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  resourceNames:
+  - openshift-dns
+  verbs:
   - "*"
 
 - apiGroups: