container_agent/schema: add stricted volume validation