fix: Prevent containers from running as root by removing unnecessary anyuid SCC bindings

[ugiordan]

Description

This PR addresses the security concern of containers running with root privileges by removing the following ServiceAccounts from default RoleBindings granting the anyuid SCC:

• Notebook
• ModelMesh
• ModelController
• Dashboard

These changes help ensure that containers run with non-root user privileges and comply with security policies. Additionally, this makes the default RoleBinding that assigns the default ServiceAccount to the anyuid SCC unnecessary:

> oc get rolebinding opendatahub -oyaml | yq 'del(.metadata)'
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:openshift:scc:anyuid
subjects:
  - kind: ServiceAccount
    name: default
    namespace: opendatahub

How Has This Been Tested?

Screenshot or short clip

Merge criteria

• You have read the contributors guide.
• Commit messages are meaningful - have a clear and concise summary and detailed explanation of what was changed and why.
• Pull Request contains a description of the solution, a link to the JIRA issue, and to any dependent or related Pull Request.
• Testing instructions have been added in the PR body (for PRs involving changes that are not immediately obvious).
• The developer has manually tested the changes and verified that the changes work

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from ugiordan. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[biswassri]

/test opendatahub-operator-e2e

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (main@b36c13a). Learn more about missing BASE report.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1460   +/-   ##
=======================================
  Coverage        ?   19.12%           
=======================================
  Files           ?      158           
  Lines           ?    10354           
  Branches        ?        0           
=======================================
  Hits            ?     1980           
  Misses          ?     8150           
  Partials        ?      224           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.