Add validation when processing pod manifests from a URL.

If name is hash of contents you can't get updates (when we support those).  PodConfig is wired for it, the syncloop isn't