gcp-spend-guardrails

Use to apply blast-radius spend controls on GCP projects — quota caps on generativelanguage.googleapis.com, Cloud Billing budget alerts, disabling paid APIs idle on projects with no recent legitimate usage, and flagging where a hard spend-cap budget (Public Preview, console-only) should be added. Idempotent. Honors --dry-run. Use standalone or as Phase 3a of gcp-ironclad.