calico: Fix operator namespace creation

infrastructure/kyverno/deny-system-namespaces.yaml

@@ -15,6 +15,7 @@ spec:
     exclude:
       clusterRoles:
       - cluster-admin
+      - tigera-operator
     validate:
       message: "Creating *-system namespaces is not allowed."
       deny: {}