K8s for small-but-real teams

Baseline

• Per-team namespaces with ResourceQuota + LimitRange.
• HPA + VPA; cluster autoscaler on node pools.
• Cost labels and a daily budget report.