Auto-cleanup of playground resources

[mxmxchere]

@jschoone had the idea of a scheduled deletion after a certain amount of time of deployed clusters in the playground-namespaces to keep the experimental character of the moin-cluster offering. This could, for example, be achieved with kyverno cleanup rules. The cleanup label could be automatically set if a resource was added using the scs-tenant role

• https://kyverno.io/docs/writing-policies/cleanup/
• https://kyverno.io/docs/writing-policies/match-exclude/#exclude-cluster-admin-clusterrole