[epic] User can list ClusterExtension-provided APIs available to them

[ncdc]

This is more nuanced than simply kubectl get operators. The use case here accepts that API discovery exists, but it may show you the existence of an API to which you don't have RBAC permissions.

The ask here is to have an easy way to list operators where the user does have RBAC permissions, presumably those configured in #383