run instance validations before checking limits

An instance may have been loaded from an older snapshot that didn't include
resource limits. This should fail validation instead of blowing up while
checking if the DEA has capacity for the instance.