Adding Monitoring to a Kubernetes Cluster with kube-prometheus

This draft keeps the operations side of a monitoring rollout intact: install kube-prometheus, expose the main services, add alerting configuration, and adjust the RBAC when the cluster needs broader access than the defaults provide.