A review of your Kubernetes/container setup against security best practices — RBAC, network policies, image scanning, and runtime protection — with concrete remediation steps.