Enable full labels for container cpu usage

[AvihuHenya]

Refactor Prometheus ServiceMonitor relabeling rules and enhance RBAC for complete container_cpu_usage_seconds_total labels.

The previous Prometheus ServiceMonitor configuration for kubelet metrics used complex and outdated metricRelabelings to extract pod, namespace, and container labels. In modern Kubernetes/EKS, cAdvisor directly exposes these labels, making the old rules unnecessary and often causing labels to be dropped. This PR simplifies the relabeling to correctly capture these labels and adds filters to exclude incomplete metrics (e.g., pause containers or empty labels). RBAC permissions are also enhanced to ensure full access to required metric endpoints.

---

[cursor]

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
_{Learn more about Cursor Agents}