Fail early if people attempt to add zuul vars or secrets

We can block this in config loading before jobs start. Leave the other
validation as well to prevent jobs from passing variables as part of the
return process.

Change-Id: I071a1fcd6037ab0dca78d83ff69b77907d0ccae6
2 files changed