actually require all required stanzas

* audit tests match the documentation
* require `license` stanza
* require at least one activatable artifact (or explicit `stage_only`)