feat: expand KCC resource inventory

[vitaliytv]

Summary

• inventory Cloud Run services/jobs and their Scheduler, Eventarc, Pub/Sub, Secret Manager, VPC, KMS, and HTTP(S) load-balancer dependencies
• normalize regional resource IDs as location/name and match RunService IAM bindings canonically
• document the expanded scope and cover KCC GVR registration

Verification

• npm test
• node --check lib/get-resources.mjs
• node --check lib/k8s-rest.mjs
• git diff --check