Enhance DeploymentRuntimeConfig to expose ServiceAccount automountServiceAccountToken

What problem are you facing?

Crossplane creates Function ServiceAccounts with automountServiceAccountToken defaulting to true. Since functions generally don't need kubernetes API access this is technically a security hole.

How could Crossplane help solve your problem?

Update the DeploymentRuntimeConfig serviceAccountTemplate to allow the user to set the automountServiceAccountToken to false for Function deployments. Setting this to false for Provider deployments would presumably cause the provider to not function.