Kubernetes Security Hardening

I harden your GKE environment for production and audit readiness — RBAC least-privilege design, OPA Gatekeeper admission policies, Kyverno enforcement, Falco runtime threat detection, and default-deny network segmentation.