fix(ci): add eventbus, services, RBAC permissions for argo self-apply

apply-argo-templates failed because ci-deploy role was missing
permissions for eventbus (argoproj.io), services (core), and
roles/rolebindings (rbac) needed to apply events/*.yaml files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

infra/k8s/argo/ci-deploy-rbac.yaml

@@ -11,8 +11,14 @@ rules:
     resources: [deployments]
     verbs: [get, list, patch]
   - apiGroups: ["argoproj.io"]
-    resources: [workflowtemplates, eventsources, sensors]
+    resources: [workflowtemplates, eventsources, sensors, eventbus]
     verbs: [get, list, create, update, patch]
+  - apiGroups: [""]
+    resources: [services]
+    verbs: [get, list, create, update, patch]
+  - apiGroups: ["rbac.authorization.k8s.io"]
+    resources: [roles, rolebindings]
+    verbs: [get, list, create, update, patch, bind, escalate]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding