After loading config and CLI overrides, validate that required fields like agent_address and cert_dir are present for the selected mode. Fail fast with clear error ...