feat: restrict service account to only beamline claim #384

Job	Run time
helm_chart_lint / lint	16s
bundler_sqlx / prepare	1m 35s
bundler_test / test	1m 41s
commit_lint / lint	13s
devcontainer / build	2m 2s
docs_build / build	19s
policy_lint / lint	9s
docs_lint / lint	8s
policy_test / test	7s
policy_container / build_publish	8s
helm_chart_publish / publish (opa)	17s
helm_chart_publish / publish (bundler)	21s
techdocs_publish / publish	1m 10s
bundler_lint / lint	1m 10s
bundler_lint / deny	26s
bundler_docs / build	1m 7s
pages_build / combine	5s
bundler_container / build_publish	41s
pages_publish / publish	10s
	12m 5s

Provide feedback