Update Confit to "next generation"

These recent updates vastly simplify validation in the configuration system.
We should now be able to validate whole subtrees of the configuration at a
time.