kubeconform-ci — validate Kubernetes manifests on every PR

A drop-in composite GitHub Action that wraps kubeconform: renders Kustomize and Helm, validates every manifest (CRDs included) against a pinned Kubernetes version, and annotates the PR with file:line errors.