istio-policy ClusterRole does not have cp namespace included in its name

This could cause issues in a multitenant environment, where every control plane will try to install the same named ClusterRole.