Include 'metrics-upgrade-sa' and 'metric-clean-upgrade' in 'update-automountserviceaccounttokens' cluster policy

The ServiceAccount 'metrics-upgrade-sa' and job/pod 'metrics-clean-upgrade*' metrics-upgrade-job are missing from 'update-automountserviceaccounttokens' cluster policy.