Additional Kubernetes client work

 - separate enum structs
 - fully implement exec auth
 - honor insecure-skip-tls-verify
 - implement reauthentication and expiry checks for exec auth
   - split `KubernetesClient::new()` and `KubernetesClient::from_context()`