fix: set AutomountServiceAccountToken to false

[cwrau]

this is not needed and it's best-practice to disable it otherwise fails in clusters with policies forbidding this.