catalog: add update permission for bindings/finalizers

Fixes this error:
secrets "mongodb-persistent-c6ztb-credentials-vp2y8" is forbidden:
cannot set blockOwnerDeletion if an ownerReference refers to a resource
you can't set finalizers on: User
"system:serviceaccount:kube-service-catalog:service-catalog-controller"
cannot update bindings/finalizers.servicecatalog.k8s.io in project
"meproject"

(openshift#16141)

Author: Jeff Peeler

examples/service-catalog/service-catalog.yaml

@@ -119,6 +119,7 @@ objects:
     - brokers/status
     - instances/status
     - bindings/status
+    - bindings/finalizers
     verbs:
     - update
   - apiGroups: