Just in case anybody else comes along, I was able to remove them by first force-removing the pods:
kubectl delete pods/catbot-tunnel-2-798675b7c5-dnw8r --grace-period=0 --force
This did not actually remove them, but instead it caused them to get stuck waiting on a foregroundDeletion event. I used kubectl edit to remove this from their definitions:
finalizers:
- foregroundDeletion
Then they finally died (and hopefully haven’t left any open resources in the system that I’m not aware of).