Runbook: Kubernetes Ingress TLS Model
Focus: Ingress Secret, Host und Certificate Mapping

1. Run ./run.sh.
2. Inspect work/evidence/certificate.txt, verify.txt and dates.txt.
3. Review SAN, Key Usage, Extended Key Usage, validity and policy.
4. Remove work/ after collecting evidence.
