Watcher should be a dedicated deployment rather then sidecar

[Demonsthere]

Preflight checklist

• I could not find a solution in the existing issues, docs, nor discussions.
• I agree to follow this project's Code of Conduct.
• I have read and am following this repository's Contribution Guidelines.
• This issue affects my Ory Cloud project.
• I have joined the Ory Community Slack.
• I am signed up to the Ory Security Patch Newsletter.

Describe your problem

The watcher is currently defined as a sidecar, which means that for multiple replicas of any applications (like kratos) we will end up with multiple watchers. This can lead to a race condition as each sidecar will try to modify/restart the deployment.

The watcher should be extracted to a dedicated deployment

Version

Yes

Additional Context

No response