Kyverno policy events → findings + actions on event bus

[CodeBuildder]

Context

Kyverno admission webhook violations normalized and emitted to the shared bus. Parent: #81.

Acceptance Criteria

• Kyverno policy violation events emit finding events with source=kyverno
• Finding includes: policy_name, resource, namespace, violation_message
• Policy allow events emit a no-op action event for audit purposes
• Integration test: submit non-compliant pod spec → finding on bus

Dependencies

Blocked by: none | Blocks: none

Notes

No model tier.