Complete the permission annotations for the ClusterRole

Bonny will generate the ClusterRole for us with `bonny.gen.manifest` but we need to annotate the controller properly with all of the things it's allowed to do. It's partially done [here](https://github.com/revelrylabs/review_bot_operator/blob/43b76135260393a79a170c90c41e60cd1f302eac/lib/review_app_operator/controllers/v1/review_app.ex#L47-L50), but incomplete.