Context:

Currently when creating multiple clusters we apply some manifests globally e.g clusterRole that would clash

DoD:

Ensure all manifests are scoped to individual clusters, e.g prefixing them.

Ensure we only use clusterRoles if strictly necessary - we'll only need cluster-scoped role bindings for privileged pods in the case of vpn and we should likely let the hosted cluster operator handle those

Include e2e to validate creation/deletion of multiple clusters works.