Closes #690 Validates YAML syntax, required keys, value types, and forbidden keys before deploy. Prevents broken deploys from bad config.