Function validate_manifest_config 

pub fn validate_manifest_config(
    manifest: &PluginManifest,
) -> Result<(), PluginError>

Validate the manifest-owned config contract without reading operator data. Called during package admission and again while resolving, deliberately avoiding a second stored/compiled copy of the schema.