⚠ fake client: use correct RBAC apiGroup name when deciding if to allow unconditional updates

⚠ fake client: use correct RBAC apiGroup name when deciding if to allow unconditional updates #1851