Module validate 

Schema validation after evaluation (C-031, spec/validation.md).

Walks the fully evaluated value tree (post-profile, post-patch) against the schema tree and reports every violation. Validation never echoes evaluated values into messages: kinds and schema-authored literals only, so secrets cannot leak. Strict mode never mutates the tree; resilient mode applies schema-driven repairs after the walk — default fills (W005), key renames (H005), string coercions (H007) — and revalidates each repaired subtree like a written one.