Investigate failing "open" for some CRs

[pintohutch]

In cases where the webhooks can't reach the operator (e.g. operator OOMs), is it worth trying out a failurePolicy=Ignore in some cases?

Acceptance Criteria:

• Assess trade-offs of "failing open" for validating webhooks
• If we find enough upsides, add this behavior