Validate PSV rules for a credentialing workflow

Pre-checks PSV rule-engine validations for the credentialing workflow without attempting a PSV_COMPLETED timeline transition. Returns the same rule-engine map shape used when a PSV_COMPLETED transition fails validation. Use before creating a PSV_COMPLETED timeline event. Requires credentialing workflow read permission. Returns 404 when the workflow is not found.