Pomerium chart grants JIT write tier mutate access on Kura custom resources

The Pomerium chart now ships a tuist-edit-kura-write ClusterRole that aggregates into the built-in edit role and grants the full mutate verb set (get, list, watch, create, update, patch, delete, deletecollection) on kura.tuist.dev resources (KuraInstance, KuraGateway). Operators with an active tuist-<env>-write JIT elevation can now recreate or delete Kura CRs (for example during a region cutover to re-render instances onto a new node pool) without having to reach for the break-glass system:masters kubeconfig. CAPI and other infrastructure CRs remain read-only for the edit tier.