Restrict paths to validate for manifests and templates

The current code validates all `**/*.pp` manifests and all `**/templates/**/*` templates.

This means it also validates anything in `spec/fixtures`, as well as anything in `vendor/bundle` (for example).

These tasks should only validate local code, not dependencies or util libraries.