Add validation of VolumeMounts

@monnand Precisely.  Storing it by value in the slice is fine, but ranging it by value is dumb.  I have a TODO in this PR I think to collect manifests by pointer instead.  One change at a time. :)