Configuration hardening

CONFIGURATION_HARDENING_AUDIT.md

@@ -25,6 +25,8 @@ This audit records the current repository-configuration authority model for
 - `build.keep_existing_haks`
 - `inventory.source_extensions`, `inventory.asset_extensions`,
   `inventory.source_json_pattern`
+- `validation.profile`, `validation.builtin_script_prefixes`, and
+  `validation.required_fields`
 - `scripts.source_dir`, `scripts.cache`, `scripts.compiler`
 - `extract.layout`, `extract.hak_discovery`, `extract.cleanup_stale`
 - `topdata.compiled_2da_dir`, `topdata.compiled_tlk`, package names, and wiki
@@ -42,9 +44,8 @@ repository-specific YAML:
 - Supported autogen algorithms: `parts_rows`, `head_visualeffects`,
   `trailing_numeric_suffix`, `model_stem`, and `first_path_segment`.
 - Native topdata dataset internals and generated JSON dataset formats.
-- NWN validator semantics for required module fields and resource-reference
-  checks. These are candidates for future validation profiles, but are not
-  repository-specific defaults.
+- NWN validator resource-reference checks. These are candidates for future
+  validation profiles, but are not repository-specific defaults.
 
 ## Migration Checklist