Configuration and secret validation

Configuration validation should provide helpful, actionable hints to guide fixes, and secret creation flows should enforce better validation so users create valid secrets and recover from mistakes more easily.