Validate fortressrole.yaml

Validate that service accounts assigned to roles have _service on the account name.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information