config: aggregate validation diagnostics - #207

Greptile Summary

The PR changes ClusterConfig validation from fail-fast behavior to deterministic aggregation of independent structural and semantic diagnostics.

• Adds source-aware validation with public paths and YAML line numbers.
• Collects validation failures across nodes, storage, host configuration, extensions, labels, and taints.
• Runs source validation before the existing archive build pipeline.
• Documents the aggregated diagnostic contract and adds CLI coverage for stable ordering and public names.

Confidence Score: 5/5

The PR appears safe to merge, with no concrete blocking or independently actionable non-blocking defects identified.

The new validation pass preserves the existing full BuildArchive pipeline while aggregating source and effective-node errors, suppressing dependent cascades, and deterministically presenting public diagnostics.

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[ClusterConfig YAML] --> B[Parse YAML node tree]
    B --> C[Collect structural and type issues]
    B --> D[Decode SourceConfig]
    D --> E[Normalize and collect semantic issues]
    E --> F[Resolve node layers]
    F --> G[Collect effective per-node issues]
    C --> H[Suppress dependent cascades]
    D --> H
    E --> H
    G --> H
    H --> I[Deduplicate and sort by public path]
    I --> J{Any issues?}
    J -- Yes --> K[Return aggregated diagnostics with source lines]
    J -- No --> L[Continue BuildArchive validation]

_{Reviews (1): Last reviewed commit: "config: aggregate validation diagnostics" | Re-trigger Greptile}