fix(argocd): add RBAC ConfigMap granting platform-engineer read+sync access

argocd/argocd-rbac-cm.yaml

@@ -7,9 +7,10 @@ metadata:
     app.kubernetes.io/name: argocd-rbac-cm
     app.kubernetes.io/part-of: argocd
 data:
+  policy.default: role:readonly
   policy.csv: |
-    # Grant the platform-engineer local account read + sync access to all applications
     p, role:platform-engineer, applications, get, */*, allow
-    p, role:platform-engineer, application, sync, */*, allow
+    p, role:platform-engineer, applications, sync, */*, allow
+    p, role:platform-engineer, projects, get, *, allow
     g, platform-engineer, role:platform-engineer
-  policy.default: ""
+    g, roger, role:admin