Exclude default SA from serviceaccount mutation - 2398

General MR

Summary

Exclude default SA from serviceaccount mutation in update-automountserviceaccounttokens clusterpolicy. This will allow us to wildcard all SAs in the namespace while letting the pre-existing default SA be mutated differently with the update-automountserviceaccounttokens-default clusterpolicy

Epic: P1BIGROCKS-2398 Issue: Exclude default SA from update-automountserviceaccounttokens serviceaccount mutation

Relevant logs/screenshots

(Include any relevant logs/screenshots)