Add JSON schema generation for kubeconform CRD validation

- ci/generate-schemas.sh extracts schemas from live cluster CRDs via kubectl
- Generated schemas committed to schemas/ for CI use
- Run `make schemas` to regenerate after CRD or K8s version changes
- validate-apps.sh and validate-clusters.sh check local schemas first
- Remove all kubeconform skip lists — all resource types now have schemas

schemas/management.cattle.io/clusterregistrationtoken_v3.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "properties": {
+    "apiVersion": {
+      "type": "string"
+    },
+    "kind": {
+      "type": "string"
+    },
+    "metadata": {
+      "type": "object"
+    },
+    "spec": {
+      "properties": {
+        "clusterName": {
+          "nullable": true,
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "status": {
+      "properties": {
+        "command": {
+          "nullable": true,
+          "type": "string"
+        },
+        "insecureCommand": {
+          "nullable": true,
+          "type": "string"
+        },
+        "insecureNodeCommand": {
+          "nullable": true,
+          "type": "string"
+        },
+        "insecureWindowsNodeCommand": {
+          "nullable": true,
+          "type": "string"
+        },
+        "manifestUrl": {
+          "nullable": true,
+          "type": "string"
+        },
+        "nodeCommand": {
+          "nullable": true,
+          "type": "string"
+        },
+        "token": {
+          "nullable": true,
+          "type": "string"
+        },
+        "windowsNodeCommand": {
+          "nullable": true,
+          "type": "string"
+        }
+      },
+      "type": "object"
+    }
+  },
+  "type": "object"
+}