Add list/watch access to ClusterRole for CSR collector
Add list/watch access to ClusterRole for CSR collector

* Certificate Signing Request collector was added in #650, but
the ClusterRole wasn't updated with access to the resource
* https://github.com/kubernetes/kube-state-metrics/pull/650

kubernetes/kube-state-metrics,kubernetes/kube-state-metrics