pub fn validate_json_schema(value: &Value, schema: &Value) -> Result<(), String>
Validate one JSON value against the deterministic JSON Schema subset used by Tilo action contracts.