[backport-1.5]: kyverno-policy-rancher-webhook-ha unit is disabled during workload cluster upgrade

A solution for issue #3005 (closed) needs to be backported to 1.5.x