fix(ci): grant argo-workflow SA configmaps + networkpolicies RBAC

apply-argo-templates step failed because the service account lacked
permissions to manage configmaps (auto-compile-configmap.yaml) and
networkpolicies (argo-workflow-netpol.yaml) in the foxhunt namespace.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

infra/k8s/argo/ci-deploy-rbac.yaml

@@ -14,7 +14,10 @@ rules:
     resources: [workflowtemplates, eventsources, sensors, eventbus]
     verbs: [get, list, create, update, patch]
   - apiGroups: [""]
-    resources: [services]
+    resources: [services, configmaps]
+    verbs: [get, list, create, update, patch]
+  - apiGroups: ["networking.k8s.io"]
+    resources: [networkpolicies]
     verbs: [get, list, create, update, patch]
   - apiGroups: ["rbac.authorization.k8s.io"]
     resources: [roles, rolebindings]