Validate Cloud Account Access to Kubernetes API

In an authorized cloud-managed Kubernetes environment, use a designated cloud-account-backed context to check one read-only Kubernetes API permission in a named namespace. The API returns an authorization decision; the check does not perform the queried operation, read Pod data, or change cluster resources. Some providers permit a public API-server endpoint, making the check usable from an Internet source allowed by endpoint controls; a private-only endpoint requires a VPC or connected network path.