feat: add shared Zod request validation

[dixonfrederick]

Closes #12

Summary

• add shared Zod schemas and validation middleware for request bodies, params, and query strings
• apply validation to prices, API keys, alerts, webhooks, and airdrops routes
• return 400 VALIDATION_ERROR responses with flattened field-level details for invalid input

Validation

• npm test -- --runInBand