Use BasicRecursiveValidatorFactory for \Drupal\update\ProjectRelease::validateReleaseData()

Postponed on 📌 Create an UploadedFile validator and deprecate error checking methods on UploadedFileInterface RTBC

Blocker is in

Looking at this again, I think keeping Validation::createValidator() is fine, because we only use it to create an exception message. We don't ever display the message to the user, so don't need TranslatableMarkup.

Marking as PMNMI in case anyone else has ideas.