This patch lands checking via https://github.com/lyft/protoc-gen-validate in Envoy for bootstrap, xDS ingestion and during filter instantiation. Risk Level: Medium (things might start blowing up on config ingestion that were slipping through before). Testing: Mostly negative tests for bootstrap/xDS/filters, since the happy path is already validated through the existing test suite. Signed-off-by: Harvey Tuch <htuch@google.com>