Cloud bills rarely explode — they creep up, one forgotten resource at a time. This is the checklist we run with clients to catch the usual suspects.