Ensure packages do not use the namespaces default ServiceAccount

Acceptance Criteria:

• Adds Constraint Template to gatekeeper.
• Adds Constraint to cluster auditor
• Tests Constraint in CI.