The operator service account should not be bound to the edit role

[astefanutti]

Currently, the operator service account is bound to the default edit role.

It both represents a security issue, and breaks OLM ability to package a bundle that's independent from the installation namespace.

Relates to #159.

/cc @sutaakar