add replicaset permission to apps group

[frostyfan109]

When tearing down a deployment, tycho attempts to wildcard delete all the following resources who have a tycho-guid=<deployment_sid> label attached: deployment, replicaset, pod, persistentvolumeclaim. Pods and deployments already have deletecollection permission under the appstore service account role. However, neither replica sets nor PVCs have a deletecollection permission.

Even when there are no replicasets/PVCs with the associated tycho-guid label, Tycho does a collection delete against the label for each resource, which requires the permission. Since the role lacks delete permission for both of these, it generates a lot of error logs during app termination even if there weren't any resources to delete anyways.

At the very least, we can mitigate the error logs for replicasets here, no harm done. However, I'd like input regarding whether or not we want to allow deletion of PVCs. I'd heavily lean towards no. If so, we should probably comment out the PVC collection delete in tycho (networkpolicy was also commented out at some point) instead of continuing to attempt the delete without permission.

[joshua-seals]

I trust your judgment on this and agree, I hate lots of logs and it's better to make the pvc deletion at present a manual process

[joshua-seals]

Pending update to the appVersion I approve this