Fix the validate target and make sure it runs before init
Fix the validate target and make sure it runs before init

This way, even if the remote-state plans are fubar, it will be caught before
hitting the network

olblak/azure,olblak/azure,jenkins-infra/azure,olblak/azure