Role fixes

[peter-quix]

• Put permissions in same order in both roles
• Add back support for specifying namespace for the platform-role, as it is either configurable fully or none at all
• add apiGroups: [""] resources: ["namespaces"] verbs: ["update", "patch"] to operator role
• add apiGroups: [""] resources: ["pods/status"] verbs: ["get"] permission to platform role
• add apiGroups: ["apps"] resources: ["statefulsets/scale"] verbs: ["get", "patch", "update"] permission to platform role
• Add hack/generate-sa-token.sh to easily generate credentials for the service account