Detect candidates for `hostUsers: false`

[jcpunk]

Is your feature request related to a problem? Please describe.
Pods that are running as non-root users can probably be shifted to hostUsers: false if hostNetwork: false.

It would be good to raise awareness of this opertunity.

Describe the solution you'd like
Note pods where containers are already running as non-root users.

Describe alternatives you've considered
A manual check by hand

Additional context
https://kubernetes.io/blog/2025/04/25/userns-enabled-by-default/