Feature Request: `--dry-run`

It would be really useful to have a `--dry-run` mode that validates permissions and current state but doesn't try to write any data.

This could be used in CI linting or to validate local setup.