fix(iris): add SYS_PTRACE to controller pod for profiling (#4418)

Adds `SYS_PTRACE` capability to the controller Deployment so py-spy and
memray profiling works on the controller pod.

Closes #4416

Generated with [Claude Code](https://claude.ai/code)

---------

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Rafal Wojdyla <ravwojdyla@users.noreply.github.com>

Author: ravwojdyla

lib/iris/src/iris/cluster/providers/k8s/controller.py

@@ -174,6 +174,7 @@ def _build_controller_deployment(
                             ],
                             "ports": [{"containerPort": port}],
                             "env": s3_env_vars,
+                            "securityContext": {"capabilities": {"add": ["SYS_PTRACE"]}},
                             "resources": controller_resources,
                             "volumeMounts": [
                                 {"name": "config", "mountPath": "/etc/iris", "readOnly": True},