Protect and Validate API endpoints with Zod

Mostly to show as a best practice for people purchasing the boilerplate - will strong-type and validate all the endpoints of the starter with Zod, which is a fantastic library