Configuration validation

ConfigDirector rejects a schema tightening while staging still holds a value that would fail

Remote config edits skip CI entirely, so the case for validating values where they are saved is easy. The check worth copying refuses a new JSON schema while any environment still holds a value it would reject.