Preflight and field validation only — no project lookup, namespace create, Helm install, upgrade, or uninstall.