Function validate_resources 

pub fn validate_resources(
    resources: &ResourceRequirements,
    context: &str,
) -> ValidationResult

Validate that a ResourceRequirements has no requests > limits for any key. A pod with requests > limits is rejected by the API server, so the mover Job never creates a pod and the run hangs — the same silent-wedge class as an impossible securityContext. context names the owner (e.g. "SnapshotPolicy mover").