Cluster-monitoring-operator fails to sync (cluster)rolebindings when roleRef has been changed

Issue

• If an admin updates manually one of the bindings managed by Cluster-monitoring-operator, the operator fails to reconcile the resource to the expected state.

• By design, a binding's roleRef can't be changed after creation as per the documentation. To change the roleRef of an existing resource and get it as per the default configuration, it needs to be deleted and recreated.