Add canary test record sets

[vedantthapa]

• Add minimal permissions for SA to manage ip address. I've granted the Compute Public IP Admin role
  This is done to avoid hard-coding an IP address into the rrdatas field
• Add ComputeAddress resource
• Add DNSRecordSet resources for each domain that we control

[vedantthapa]

Since these resources are breaking our validation jobs, I'm going to move them inside ./k8s/components/infrastructure. These definitions have a slightly different schema since they use rrdatasRefs instead of rrdatas so the validate-mandatory-fields action will always fail.

Given that these resources not necessarily end-user related and more for internal testing, I hope we're cool with this.

[ericmalen]

LGTM