Function validate_source 

pub fn validate_source(source: &Source) -> ValidationResult

A single backup Source is well-formed: pvc and pvcSelector are mutually exclusive, and at least one must be set (ADR §3.3 — modeled as sibling Options because both forms share sourcePath* keys, so it’s a webhook check, not an enum).