COSI: After relaxing metadata parsing, servicing operations should make more of an effort to ensure the COSI file is acceptable

[frhuelsz]

I see, do we do more strict validation/returning errors once we know whether trident is doing stream image or something else?

Originally posted by @ayaegashi in #394 (comment)