How Namespace-as-a-Service Enables Self-Service Kubernetes Recovery