feat(operator): extend LokiStack authorization to support OTel Semantics

[JoaoBraveCoding]

What this PR does / why we need it:

This PR extends the authorization to support OTel Semantics making authorization work with k8s_namespace_name for both queries & rules.

Depends on observatorium/opa-openshift#32

Which issue(s) this PR fixes:

See https://issues.redhat.com/browse/LOG-6577

Special notes for your reviewer:

Rules were tested with the following manifest

apiVersion: loki.grafana.com/v1
kind: AlertingRule
metadata:
  name: alerting-rule
  namespace: log-test-0
  labels:
    openshift.io/cluster-monitoring: "true"
spec:
  tenantID: "application"
  groups:
    - name: alerting-rule
      rules:
        - alert: HighPercentageErrorOld
          expr: |
            sum(rate({ log_type="application", kubernetes_namespace_name="log-test-0" } | level="error"[7m])) by (job)
              > 0.01
          for: 10s
          labels:
            severity: info
          annotations:
            summary: High Logger Test Errors Old
            description:  High Logger Test Errors Old
        - alert: HighPercentageErrorNew
          expr: |
            sum(rate({ log_type="application", k8s_namespace_name="log-test-0" } | level="error"[7m])) by (job)
              > 0.01
          for: 10s
          labels:
            severity: info
          annotations:
            summary: High Logger Test Errors New
            description:  High Logger Test Errors New
        - alert: HighPercentageErrorNewBad
          expr: |
            sum(rate({ log_type="application", k8s_namespace_name="log-test-1" } | level="error"[7m])) by (job)
              > 0.01
          for: 10s
          labels:
            severity: info
          annotations:
            summary: High Logger Test Errors New Bad
            description:  High Logger Test Errors New Bad
        - alert: HighPercentageErrorMix
          expr: |
            sum(rate({ log_type="application", kubernetes_namespace_name="log-test-0", k8s_namespace_name="log-test-0" } | level="error"[7m])) by (job)
              > 0.01
          for: 10s
          labels:
            severity: info
          annotations:
            summary: High Logger Test Errors Mix
            description:  High Logger Test Errors Mix

Checklist

• Reviewed the CONTRIBUTING.md guide (required)
• Documentation added
• Tests updated
• Title matches the required conventional commits format, see here
  • Note that Promtail is considered to be feature complete, and future development for logs collection will be in Grafana Alloy. As such, feat PRs are unlikely to be accepted unless a case can be made for the feature actually being a bug fix to existing behavior.
• Changes that require user attention or interaction to upgrade are documented in docs/sources/setup/upgrade/_index.md
• If the change is deprecating or removing a configuration option, update the deprecated-config.yaml and deleted-config.yaml files respectively in the tools/deprecated-config-checker directory. Example PR

[JoaoBraveCoding]

Moving to WIP as querying obs-api to get rules currently doesn't work as intended

[xperimental]

Works fine overall 🥳

I have added a few comments. Not approved yet, because I first want to discuss the change for the infrastructure tenant.