Kubernetes penetration testing explained for buyers: what a real test covers, why kube-bench/Kubescape scans aren’t one, and how to scope it.