Batch dry-run should also attempt only 'created' resources

[timothysmith0609]

Feature request

Following #781, all resources are grouped together in the validation phase and batch-applied against the API server. This includes resources that are otherwise deployed via create, replace, replace-force. As an additional precaution, we should group these resources together and dry-run only those, in addition to the current check of all resources.