Add required RBAC on TrainJob finalizer sub-resources

[astefanutti]

What this PR does / why we need it:

This PR adds RBAC on TrainJob finalizer sub-resources, that's required for clusters with https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#ownerreferencespermissionenforcement.

Fixes #2349

Checklist:

• Docs included if any changes are user facing

[tenzen-y]

Thank you!
/lgtm
/approve

[google-oss-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: tenzen-y

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [tenzen-y]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coveralls]

Pull Request Test Coverage Report for Build 12315867030

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 100.0%

---

Totals
Change from base Build 12241759597:	0.0%
Covered Lines:	85
Relevant Lines:	85

---

💛 - Coveralls