The operator should be:

1. A namespace-scoped operator.
2. Watch the installation CR in the namespace that it is deployed to.
3. Watch the binding CRs (can we rename it to something else? I don't think it's a good idea to have `bind` as part of the CR name) in namespaces that the are set via environment variables. See https://github.com/integr8ly/keycloak-operator/blob/master/cmd/keycloak-operator/main.go#L67-L70 for example.