[WIP] [CORE-12994] feat: operator RBAC for HostQoSPolicy

[coutinhop]

Grant the calico-apiserver backing-store CRUD on hostqospolicies
(+/status), the Enterprise calico-kube-controllers the verbs its status
aggregator needs, and calico-node plus the non-cluster-host SA patch on
hostqospolicies/status for Felix's Server-Side Apply writes.
Enterprise-only; OSS RBAC is unchanged.

Description

Release Note

TBD

For PR author

• Tests for change.
• If changing pkg/apis/, run make gen-files
• If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

• Milestone set according to targeted release.
• Appropriate labels:
  • kind/bug if this is a bugfix.
  • kind/enhancement if this is a a new feature.
  • enterprise if this PR applies to Calico Enterprise only.