feat: add --validate-model to run the preflight model checks only

apps/cli/src/docker.ts

@@ -413,6 +413,7 @@ export interface WorkerOptions {
   pipelineTesting?: boolean;
   keepContainer?: boolean;
   authOnly?: boolean;
+  validateModel?: boolean;
   piAuthHostPath?: string;
 }
 
@@ -515,6 +516,9 @@ export function spawnWorker(opts: WorkerOptions): ChildProcess {
   if (opts.authOnly) {
     args.push('--validate-auth');
   }
+  if (opts.validateModel) {
+    args.push('--validate-model');
+  }
 
   // Inherit stderr so `docker run` daemon errors surface to the user;
   // ignore stdin/stdout (the container ID is noise).