Issue: skctl validate annotations do not include fix suggestions

Issue: skctl validate annotations do not include fix suggestions: a task in LegoFlow-SWE (Harbor dataset). The system should be extensible so that different validators can suggest different kinds of fixes, and the first patch in the list is considered the recommended fix for automated application.