Always first perform least expensive validations

[Glitchy-Tozier]

Basically, first perform length-checks (especially for arrays) and only then perform all other checks. Perform custom checks last.

This is to aid as an additional buffer against primitive DOS attacks.

[jmjoy]

Maybe throw a compile-time warning when length-checks aren't defined firstly in #[validate] is a good idea.