Validate project DSD structure and data

Validates bound global DSD structure first. Data checks (column presence, codelist allow-lists, observation-key uniqueness) run only when structure is valid and published timeseries data exists in DuckDB. Always returns HTTP 200 with a report when the project exists (use valid and nested blocks, not only HTTP status).