🚨DO NOT PUSH TO PRODUCTION🚨 enable principal/identity mutability

This commit flags both ServicePrincipalProfile and
PlatformWorkloadIdentityProfile as mutable in static validation so that
the ExcludePrincipals in the DenyAssignment for a cluster can be tested
and confirmed to support workload identities

This commit must be reverted after confirming this functionality in
canary

pkg/api/v20240812preview/openshiftcluster.go

@@ -56,10 +56,10 @@ type OpenShiftClusterProperties struct {
 	ConsoleProfile ConsoleProfile `json:"consoleProfile,omitempty"`
 
 	// The cluster service principal profile.
-	ServicePrincipalProfile *ServicePrincipalProfile `json:"servicePrincipalProfile,omitempty"`
+	ServicePrincipalProfile *ServicePrincipalProfile `json:"servicePrincipalProfile,omitempty" mutable:"true"`
 
 	// The workload identity profile.
-	PlatformWorkloadIdentityProfile *PlatformWorkloadIdentityProfile `json:"platformWorkloadIdentityProfile,omitempty"`
+	PlatformWorkloadIdentityProfile *PlatformWorkloadIdentityProfile `json:"platformWorkloadIdentityProfile,omitempty" mutable:"true"`
 
 	// The cluster network profile.
 	NetworkProfile NetworkProfile `json:"networkProfile,omitempty"`