Validate and bound audit request inputs

[mikewheeleer]

Validate audit

Description

audit inputs aren't fully bounded. This issue adds declarative validation.

Requirements and context

• Repository scope: Agentpay-Org/Agentpay-backend only.
• Validate audit request inputs against a schema with sane bounds; reject invalid with structured 400s.
• Behaviour otherwise unchanged.
• Cover valid and invalid in tests.

Suggested execution

• Fork the repo and create a branch
• git checkout -b refactor/audit-91-validate
• Implement changes
  • Write code in: the relevant module.
  • Write comprehensive tests in: cover the new behaviour and edge cases.
• Test and commit

Test and commit

• Run npm run lint, npm test, and npm run build.
• Cover edge cases: valid passes, oversized/malformed rejected.
• Include the full test output in the PR description.

Example commit message

refactor(audit): validate and bound inputs

Guidelines

• Minimum 95 percent test coverage for impacted modules.
• Clear, reviewer-focused documentation.
• Timeframe: 96 hours.

Community & contribution rewards

• 💬 Join the AgentPay community on Discord: https://discord.gg/eXvRKkgcv
• ⭐ This is a GrantFox OSS / Official Campaign task and may be rewarded. When your PR is merged you'll be prompted to rate the project — a 5-star rating is much appreciated.