Function validate_capabilities 

pub fn validate_capabilities(caps: &[String]) -> Result<()>

Validate a list of capability strings. Shares validate_tags rules (non-empty, <=128 bytes each, clean chars, <=50 entries).