gcp-iam-least-privilege — trim Owner/Editor before it becomes an audit finding

Audits GCP IAM bindings and flags over-broad primitive roles (Owner/Editor) with least-privilege suggestions.