V3 Kubernetes manifest validation capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local kubeconform CLI ingredient exposes bounded Kubernetes manifest operations for readiness and schema validation. Project operations run from an explicit project directory cwd supplied at execution time, accept only a trusted relative manifest file or directory plus one Kubernetes version, avoid caller-supplied kubeconform flags, avoid shell wrappers, and keep diagnostics visible as JSON output. Validation uses strict mode, summary, JSON output, and the default schema location only; it exposes no stdin, ignore pattern, skip/reject list, schema-location override, schema cache path, insecure TLS, debug profile, environment override, or arbitrary command execution. Approval is ask because kubeconform may download schemas over HTTP(S) for the requested Kubernetes version. Requires kubeconform on PATH.