Validate Kubernetes Deployment pod security context (runAsNonRoot, readOnlyRootFilesystem), probes, and resource limits.