add the watch verb (to the namespace apiGroup for the prometheus-operator ClusterRole).

To get the "Failed to watch" error to stop happening in the prometheus-operator logs.

Fixes #1324 for kube-prometheus.