Kyverno on OKE: Admission Policies Without Rego

Kyverno on OKE: enforce admission control, auto-generate NetworkPolicies, and mutate resources in plain YAML. A no-Rego alternative to OPA Gatekeeper.