[FEAT] - Team RBAC use LabelSelector for Cluster & Team

[IvoGoman]

Priority

(Medium) I'm annoyed but I'll live

Description

Currently the Team RBAC uses direct mapping of TeamRoleBinding to Cluster and Team by name. It should be made possible to set a LabelSelector instead for either referenced resource. This will reduce the configuration effort for the ClusterAdmin and makes RBAC work OOTB for newly onboarded clusters and teams.

Acceptance Criteria:

• [x] Add a LabelSelector for Cluster into the TeamRoleBinding CRD #238
• [x] Validate per Webhook that only clusterName or clusterSelector is set #238
• Make these LabelSectors immutable

Reference Issues

No response

[IvoGoman]

Requirement of LabelSelector for Teams moved to #255