add support for default user-facing ClusterRoles

[losil]

The aggregated ClusterRoles implemented in #752 are missing the default user-facing ClusterRoles labels. Without using them additional RoleBindings must be created to enable namespace editors to manage their resources like VaultAuth or VaultStaticSecret.

[hashicorp-cla-app[bot]]

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes

_{Have you signed the CLA already but the status is still pending? Recheck it.}