k8s-service-endpoint-audit — find the Services that route nowhere

A Service with a typo in its selector does not fail, it just quietly returns connection refused forever. This walks every Service, resolves what it actually points at, and names the ones that point at nothing.