Container-first validation: remove fallbacks, fill check gaps #502

Job	Run time
test: unit (3.12)	21s
ci: type-check	16s
security-and-standards / security: semgrep	51s
test: unit (3.13)	19s
test: integration (3.13)	1m 10s
test: integration (3.14)	1m 8s
release: gates	14s
ci: dependency-audit	25s
test: unit (3.14)	18s
security-and-standards / security: trivy	27s
test: integration (3.12)	1m 9s
security-and-standards / security: codeql	1m 20s
security-and-standards / ci: standards-compliance	18s
	8m 16s

Provide feedback