Add Zod validation to all API endpoints and remove debug test route

Adds schema-based input validation across helcim, events, members,
series, admin, and updates API endpoints. Removes the peer-support
debug test endpoint. Adds validation test coverage.

server/api/helcim/update-billing.post.js

@@ -7,25 +7,9 @@ export default defineEventHandler(async (event) => {
   try {
     await requireAuth(event)
     const config = useRuntimeConfig(event)
-    const body = await readBody(event)
-    
-    // Validate required fields
-    if (!body.customerId || !body.billingAddress) {
-      throw createError({
-        statusCode: 400,
-        statusMessage: 'Customer ID and billing address are required'
-      })
-    }
+    const body = await validateBody(event, helcimUpdateBillingSchema)
 
     const { billingAddress } = body
-    
-    // Validate billing address fields
-    if (!billingAddress.street || !billingAddress.city || !billingAddress.country || !billingAddress.postalCode) {
-      throw createError({
-        statusCode: 400,
-        statusMessage: 'Complete billing address is required'
-      })
-    }
 
     const helcimToken = config.public.helcimToken || process.env.NUXT_PUBLIC_HELCIM_TOKEN
     
@@ -54,7 +38,7 @@ export default defineEventHandler(async (event) => {
       console.error('Billing address update failed:', response.status, errorText)
       throw createError({
         statusCode: response.status,
-        statusMessage: `Failed to update billing address: ${errorText}`
+        statusMessage: 'Billing update failed'
       })
     }
     
@@ -65,10 +49,11 @@ export default defineEventHandler(async (event) => {
       customer: customerData
     }
   } catch (error) {
+    if (error.statusCode) throw error
     console.error('Error updating billing address:', error)
     throw createError({
-      statusCode: error.statusCode || 500,
-      statusMessage: error.message || 'Failed to update billing address'
+      statusCode: 500,
+      statusMessage: 'An unexpected error occurred'
     })
   }
 })