Improve Candidate Validation

Schema-backed request validation is now used on candidate endpoints, returning clearer invalid_input messages when required fields are missing or malformed. Applies to the following endpoints: