verify release image falls within supported release window

The hypershift operator only supports specific versions of release payloads. We'd like to give users early feedback by validating that the release payload they have picked falls within the backend operator' supported window. 

The backend controller loop performs this check here. We'd like the same check to be introduced into an optional validating webhook.