pub fn validate_mounts(mounts: &[FilesystemMount]) -> Result<(), String>Expand description
Validate a list of mounts. Rules are independent of the constraint set (cross-checks like the drift lint live in act-build). Returns the first violation as a human-readable string.