Add validation when processing pod manifests from a URL.

Which with Brendan's other change to hash the container is less necessary (name being predictable across versions)