Hardening the Kubernetes supply chain

From SBOMs to admission policies — a field guide to trusting what runs in your cluster.