Reject invalid diffs viewerBaseUrl values during manifest config validation, not later during plugin registration. Keep runtime normalization intact and add manifest-level coverage so bad protocols and query/hash values fail fast.