[MONIT-4187] Allow specifing a namespace filter for logs

This changeset includes in a separate commit the necessary bits to roll the logs daemonset when there's a configuration change, same as the events component.

I've tested this with

logs:
  enabled: true
  namespaces:
    - monitoring
    - nacho
  fluentbit:
    enabled: true

and no trace of pods in kube-system or other namespaces whatsoever.

The filter allows to exclude, instead of include so somebody could allow logs from any namespace except from kube-system. For my use case this is good enough, I'd rather to control what's sent than what's not sent but happy to discuss. Also to discuss if we want to send everything by default, of course.