cannot set blockOwnerDeletion if an ownerReference refers to a resource you can't set finalizers on: , <nil>

**What happened?**
The superset instance to be created

**Environment**
- Operator version: 0.2.0
- Kubernetes version: Openshift 4.20 / Kubernetes 1.33
- Install method: helm

**Reproduction**
create a superset instance

```
logs: {"level":"error","ts":"2026-09-10T14:36:45Z","msg":"Reconciler error","controller":"superset","controllerGroup":"superset.apache.org","controllerKind":"Superset","Superset":{"name":"superset","namespace":"***"},"namespace":"***","name":"superset","reconcileID":"69d637b5-3126-441f-9fd3-5da8e03552ce","error":"reconciling ServiceAccount: serviceaccounts \"superset\" is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to a resource you can't set finalizers on: , ","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:494\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:437\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func1.1\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:312"}
```

It's missing a permission for finalizers

I managed to solve it with adding this rule:

```
rules:
- verbs:
- update
- patch
apiGroups:
- superset.apache.org
resources:
- '*/finalizers'
```

Start by inspecting the Helm chart's RBAC rules and the operator reconciliation path for the ServiceAccount. Reproduce creation of a Superset instance on the stated Kubernetes or OpenShift environment, then verify that the required finalizers permission is present and creation completes without the reported error.

Written by the indexing model from the issue text.