Story: As an author of an operator that ships a webhook, like Gatekeeper I would like OLM to create the webhook, even if it applies to all resources, under the condition that the failure policy is set to Ignore so that I can leverage OLM to handle the lifecycle of the webhook and so that the general stability of the cluster is not impacted.

Background:

• operators like Gatekeeper ship with wide webhook configurations, see RFE-3970
• OLM currently prevents the creation of such webhooks
• it is safe to allow these configuration if the webhook fails open (failures are ignored)

Acceptance criteria:

• webhook lifecycling no longer fails for webhooks that watch all cluster resources