Add a binding to the cluster role system:auth-delegator to the service account for external-secrets

Part of https://gitlab.com/gitlab-com/gl-infra/reliability/-/issues/16931

Porting the change from gitlab-com/gl-infra/charts!34 (merged)