fix: Update cluster roles

[kamilprz]

Description

There was still mentions of retina.io within the cluster role files for agent and operator. This PR updates those to retina.sh. It also adds in additional permissions to access captures and jobs.

Related Issue

#1936

Checklist

• I have read the contributing documentation.
• I signed and signed-off the commits (git commit -S -s ...). See this documentation on signing commits.
• I have correctly attributed the author(s) of the code.
• I have tested the changes locally.
• I have followed the project's style guidelines.
• I have updated the documentation, if necessary.
• I have added tests, if applicable.

Screenshots (if applicable) or Testing Completed

Before / Current

After

---

Installing via https://retina.sh/docs/Installation/Setup#basic-mode

>VERSION=$( curl -sL https://api.github.com/repos/microsoft/retina/releases/latest | jq -r .name)
helm upgrade --install retina oci://ghcr.io/microsoft/retina/charts/retina \
    --version $VERSION \
    --namespace kube-system \
    --set image.tag=$VERSION \
    --set operator.tag=$VERSION \
    --set image.pullPolicy=Always \
    --set logLevel=info \
    --set os.windows=true \
    --set operator.enabled=true \
    --set operator.enableRetinaEndpoint=true \
    --skip-crds \
    --set enabledPlugin_linux="\[dropreason\,packetforward\,linuxutil\,dns\,packetparser\]" \
    --set enablePodLevel=true \
    --set enableAnnotations=true
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /mnt/c/Users/kamilp/.kube/config
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /mnt/c/Users/kamilp/.kube/config
Release "retina" does not exist. Installing it now.
Pulled: ghcr.io/microsoft/retina/charts/retina:v0.0.33-dev-rc1
Digest: sha256:e01d04909dcfc1d55529e8c39b100be77a4a4d1c5609d5fb694650bc0f5cef94
NAME: retina
LAST DEPLOYED: Fri Dec  5 22:10:31 2025
NAMESPACE: kube-system
STATUS: deployed
REVISION: 1
NOTES:
1. Installing retina service using helm: helm install retina ./deploy/standard/manifests/controller/helm/retina/ --namespace kube-system --dependency-update
2. Cleaning up/uninstalling/deleting retina and dependencies related:
  helm uninstall retina -n kube-system
>
>kubectl get clusterrole retina-cluster-reader -n kube-system -o yaml | grep "retina.io"
>
>kubectl get clusterrole retina-cluster-reader -n kube-system -o yaml | grep "retina.sh"
  - retina.sh
  - retina.sh
  - retina.sh
  - retina.sh
  - retina.sh

Installing via - https://retina.sh/docs/Installation/Setup#advanced-mode-with-local-context

>VERSION=$( curl -sL https://api.github.com/repos/microsoft/retina/releases/latest | jq -r .name)
helm upgrade --install retina oci://ghcr.io/microsoft/retina/charts/retina \
    --version $VERSION \
    --namespace kube-system \
    --set image.tag=$VERSION \
    --set operator.tag=$VERSION \
    --set image.pullPolicy=Always \
    --set logLevel=info \
    --set os.windows=true \
    --set operator.enabled=true \
    --set operator.enableRetinaEndpoint=true \
    --skip-crds \
    --set enabledPlugin_linux="\[dropreason\,packetforward\,linuxutil\,dns\,packetparser\]" \
    --set enablePodLevel=true \
    --set enableAnnotations=true
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /mnt/c/Users/kamilp/.kube/config
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /mnt/c/Users/kamilp/.kube/config
Release "retina" does not exist. Installing it now.
Pulled: ghcr.io/microsoft/retina/charts/retina:v0.0.33-dev-rc1
Digest: sha256:e01d04909dcfc1d55529e8c39b100be77a4a4d1c5609d5fb694650bc0f5cef94
NAME: retina
LAST DEPLOYED: Fri Dec  5 22:17:06 2025
NAMESPACE: kube-system
STATUS: deployed
REVISION: 1
NOTES:
1. Installing retina service using helm: helm install retina ./deploy/standard/manifests/controller/helm/retina/ --namespace kube-system --dependency-update
2. Cleaning up/uninstalling/deleting retina and dependencies related:
  helm uninstall retina -n kube-system
>
>kubectl get clusterrole retina-cluster-reader -n kube-system -o yaml | grep "retina.io"
>
>
>kubectl get clusterrole retina-cluster-reader -n kube-system -o yaml | grep "retina.sh"
  - retina.sh
  - retina.sh
  - retina.sh
  - retina.sh
  - retina.sh
>
>kubectl get clusterrole retina-operator-role -n kube-system -o yaml | grep "retina.io"
>
>kubectl get clusterrole retina-operator-role -n kube-system -o yaml | grep "retina.sh"
  - retina.sh
  - retina.sh
  - retina.sh
  - retina.sh
  - retina.sh
  - retina.sh
  - retina.sh
  - retina.sh