Builder upload YAML validation can be bypassed

[TristanInSec]

The YAML validation in the builder upload endpoint does not fully restrict values that could resolve to arbitrary Python references at agent load time.

PR #5344 hardens the validation to reject these values.