Validate the head source

Runs the publish-time framework quality gate without changing source: format, typecheck, lint, build, and a server-render of every page using placeholder content synthesized from the CMS schema. Failures return ok: false with diagnostics, and pages that compiled but threw while rendering in renderFailures. No lease is required and no CMS content is read, so the outcome depends only on source and schema.