k8s-hpa-audit — catch autoscaling gaps before they page you

A static linter for HorizontalPodAutoscaler hygiene: it reads Kubernetes manifests and flags workloads with no HPA, no-op HPAs, missing metrics, out-of-band CPU targets, and dangling scaleTargetRefs — no cluster access required.