Separate updater config types for clone, update, and validate

[renatav]

UpdateConfig currently mixes clone, update, and validate-only settings, which makes some fields valid only in certain modes. A concrete example is exclude_filter: it is meaningful for clone validate, but not for update. That leads to mode-dependent behavior and defensive normalization in attrs_post_init,