container_agent: add manifest schema validation

add a schema for the YAML manifest and enforce it at startup.

I didn't remove the manual manifest checking, because it provides friendlier error output and is more extensive.

I could add more strict schema validation if you think the approach is good.