Treat lint warnings as failures, enable manifest validation

Nearly - it now excludes spec/fixtures/, but since we have no use of vendor, I think it's OK to remove.  https://github.com/puppetlabs/puppetlabs_spec_helper/blob/master/lib/puppetlabs_spec_helper/rake_tasks.rb#L200