Act as a DevSecOps Engineer. Provide a checklist for hardening a Kubernetes cluster. Explain how to implement Network Policies, Pod Security Admissions, and how to use "Kube-bench" for CIS benchmark auditing.