Extract `WorkspaceAdmission` CRD used by ws-proxy

[csweichel]

To reduce the API load when users change their port or workspace sharing settings. This way ws-proxy doesn't need an informer for the whole workspace, but just for the WorkspaceAdmission.

Spec contains a PortSpec and AdmissionLevel.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.