k8s-job-ttl-audit — find finished Kubernetes Jobs that never clean up

Finished Jobs never leave on their own without ttlSecondsAfterFinished. This CLI finds Jobs with no TTL or a uselessly long one, reports leftover Pods, and gates CI.