Spot capacity interruptions are making `k3d-dev.sh` unreliable for active development. Add an opt-in `--on-demand` flag so developers can trade cost for stability when needed. Default behavior remains spot.