Function validate_cluster_repository 

pub fn validate_cluster_repository(
    spec: &ClusterRepositorySpec,
) -> Vec<ValidationError>

Validate a ClusterRepository spec, accumulating all problems (ADR §3.2).

All(false) is rejected as meaningless (SKILL: “false is rejected by webhook”).