try running kubeconform on yaml

[clux]

via suggestion in upstream kubeconform repo. if this doesn't work or requires login we could also use this action but it's a bit opinionated and un-upgradeable (pins in awkward field)

EDIT: need to inject the crd into the store.. maybe doing this later EDIT2: https://github.com/kubernetes-sigs/kubectl-validate might be an easier way in the future since it supports yaml schemas (no conversion needed)