Add `nyl template --offline` option

This would disable using `lookup()`, and we would need to assume some default `KUBE_API_VERSIONS`. I think we should assume a modern set of those (e.g. `networking.k8s.io/v1/Ingress`) for a vanilla Kubernetes installation.

This is useful for testing manifests without connecting to a cluster.