Using the new CustomizeDiff mechanism, we can verify that the given
jobspec is valid at plan time, and then include some information in the
diff showing high-level changes that are implied by the jobspec changes.

We can also use the JobModifyIndex mechanism to detect if changes are made
outside of Terraform between our various operations, thus helping us keep
our promise that Terraform will do what the plan says or produce an error.