BugFix: move app: kyverno to labels for tutorial (#1943)

While trying out the tutorial found a recent change that caused the tutorial to not work.

```bash
$ k create -f install.yaml
namespace/kyverno created
customresourcedefinition.apiextensions.k8s.io/clusterpolicies.kyverno.io created
customresourcedefinition.apiextensions.k8s.io/clusterpolicyreports.wgpolicyk8s.io created
customresourcedefinition.apiextensions.k8s.io/clusterreportchangerequests.kyverno.io created
customresourcedefinition.apiextensions.k8s.io/generaterequests.kyverno.io created
customresourcedefinition.apiextensions.k8s.io/policies.kyverno.io created
customresourcedefinition.apiextensions.k8s.io/policyreports.wgpolicyk8s.io created
customresourcedefinition.apiextensions.k8s.io/reportchangerequests.kyverno.io created
serviceaccount/kyverno-service-account created
clusterrole.rbac.authorization.k8s.io/kyverno:admin-policies created
clusterrole.rbac.authorization.k8s.io/kyverno:admin-policyreport created
clusterrole.rbac.authorization.k8s.io/kyverno:admin-reportchangerequest created
clusterrole.rbac.authorization.k8s.io/kyverno:customresources created
clusterrole.rbac.authorization.k8s.io/kyverno:generatecontroller created
error: error validating "install.yaml": error validating data: ValidationError(ClusterRole.metadata): unknown field "app"
f you choose to ignore these errors, turn validation off with --validate=false
```

Signed-off-by: William Montgomery <wmontgomery@apexclearing.com>

definitions/release/install.yaml

@@ -3183,8 +3183,8 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  app: kyverno
   labels:
+    app: kyverno
     app.kubernetes.io/component: kyverno
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Kustomize