C8s: A Confidential Kubernetes Architecture (ArXiv cs.ET Recent Papers, 2026)