cli: `-namespace` should override job namespace