runbook-lint — catch missing sections and dead links before an incident does

A small Go CLI that fails CI when an operational runbook is missing required sections, ownership frontmatter, a recent review date, or has broken internal links.