Validate early.
Fixes FACTORY-2883.
Without this, ODCS may transition a compose to done and commit to the DB, but
only then validate it, find a missing package, and mark the compose as failed.
This makes the compose flipflop from "complete" to "failed", when it should
just go straight to "failed".