shellify: no verification that ifDepsChanged only includes direct deps

[zombiezen]

At the moment, a catalog can specify Exec.condition.ifDepsChanged with IDs that aren't in the direct deps. Since avoiding the validation can result in undefined behavior in scripts, it would be good to add this validation.