feat: wire conflow config validation pipeline

Author: hyperpolymath

.conflow.yaml

@@ -0,0 +1,38 @@
+# conflow pipeline - Full generate → validate → export
+version: "1"
+name: "tma-mark2"
+
+stages:
+  - name: "generate"
+    description: "Generate configuration using Nickel"
+    tool:
+      type: nickel
+      command: export
+      file: configs/config.ncl
+      format: json
+    input: "configs/config.ncl"
+    output: generated/config.json
+
+  - name: "validate"
+    description: "Validate against CUE schema"
+    tool:
+      type: cue
+      command: vet
+      schemas:
+        - schemas/config.cue
+    input:
+      from_stage: generate
+    depends_on:
+      - generate
+
+  - name: "export"
+    description: "Export final configuration as YAML"
+    tool:
+      type: cue
+      command: export
+      out_format: yaml
+    input:
+      from_stage: generate
+    output: deploy/config.yaml
+    depends_on:
+      - validate

configs/config.ncl

@@ -0,0 +1,11 @@
+# Configuration generation
+{
+  name = "my-app",
+  replicas =
+    let env = "dev" in
+    if env == "prod" then 5
+    else if env == "staging" then 3
+    else 1,
+  port = 8080,
+  env = "dev",
+}

schemas/config.cue

@@ -0,0 +1,9 @@
+// Configuration schema
+package config
+
+#Config: {
+    name:     string
+    replicas: int & >=1
+    port:     int & >=1 & <=65535
+    env:      string
+}