fix: RunResourceAction: error getting Lua resource action: built-in script does not exist #24490

[FourFifthsCode]

Checklist:

• Either (a) I've created an enhancement proposal and discussed it with the community, (b) this is a bug fix, or (c) this does not need to be in the release notes.
• The title of the PR states what changed and the related issues number (used for the release note).
• The title of the PR conforms to the Title of the PR
• I've included "Closes [ISSUE #]" or "Fixes [ISSUE #]" in the description to automatically close the associated issue.
• I've updated both the CLI and UI to expose my feature, or I plan to submit a second PR with them.
• Does this PR require documentation updates?
• I've updated documentation as required by this PR.
• I have signed off all my commits as required by DCO
• I have written unit and/or e2e tests for my change. PRs without these are unlikely to be merged.
• My build is green (troubleshooting builds).
• My new feature complies with the feature status guidelines.
• I have added a brief description of why this PR is necessary and/or what this PR solves.
• Optional. My organization is added to USERS.md.
• Optional. For bug fixes, I've indicated what older releases this fix should be cherry-picked into (this may or may not happen depending on risk/complexity).

Fixes #24490 RunResourceAction: error getting Lua resource action: built-in script does not exist

Should be cherry picked to v3.1

Also includes added rbac cluster role for auditing RunResourceAction, which gives error like:

{"level":"error","msg":"Unable to create audit event: events is forbidden: User \"system:serviceaccount:argocd:argocd-server\" cannot create resource \"events\" in API group \"\" in the namespace \"dev-next\"","name":"nginx","reason":"ResourceActionRan","time":"2025-09-09T19:05:28Z","type":"Normal","user":"admin"}

[bunnyshell]

❌ Preview Environment deleted from Bunnyshell

Available commands (reply to this comment):

• 🚀 /bns:deploy to deploy the environment

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (master@f5a562a). Learn more about missing BASE report.
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff            @@
##             master   #24491   +/-   ##
=========================================
  Coverage          ?   60.35%           
=========================================
  Files             ?      350           
  Lines             ?    60036           
  Branches          ?        0           
=========================================
  Hits              ?    36237           
  Misses            ?    20884           
  Partials          ?     2915           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.