k8s-resource-recommender — right-size Kubernetes requests from real Prometheus usage

VPA is heavy and intrusive. This is a read-only CLI: point it at Prometheus, get a YAML patch with recommended requests/limits from real p95 usage.