subpicture: merge pf_validate and pf_update calls and use operations

pf_validate is supposed to tell if the regions need to be redone or not. But since pf_update is going to write the regions, it can also reset the container by itself. It's the owner of these regions.

Then use (rebased) commits from !4294 to use operations virtual table.