Apply some lockdown on the metadata-server capabilities.
Apply some lockdown on the metadata-server capabilities.

When setting capabilities we should drop the ones we would get by default and explicitly specify what we need.

For background, see
https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/

Change-Id: Ib0cc3bedd62626829f613b0ff9884be6a318c8f5
GitOrigin-RevId: de5aef9dcadbd637305f2738176b656839c38624

googlecloudrobotics/core,googlecloudrobotics/core,googlecloudrobotics/core