Goal: 

horizon-operator currently runs the Pod using root. This shouldn't be necessary for Horizon, and as done for other operators, we should be able to remove root and set the right SecurityContext.