fix(kube): add RBAC rule for sandbox finalizer updates (#1203)

Author: sjenning

deploy/kube/manifests/agent-sandbox.yaml

@@ -4111,4 +4111,10 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - agents.x-k8s.io
+  resources:
+  - sandboxes/finalizers
+  verbs:
+  - update
 ---