feat: wire Zod validation into API routes, improve types and components

- Add 8 new Zod schemas (UpdateCustomer, UpdateSupplier, UpdateSupplierInvoice,
  UpdateAccount, BankUnlink, RunReconciliation, CorrectJournalEntry,
  EvaluateMappingRules) and wire validateBody() into 24 JSON-body API routes
- Remove redundant manual validation checks replaced by Zod
- Add comprehensive schema tests (222 tests)
- Improve type definitions in types/index.ts with expanded interfaces
- Refactor extension types (push-notifications, receipt-ocr) for cleaner imports
- Update transaction components (BatchCategorySelector, SwipeCategorizationView,
  QuickReviewDialog, VatTreatmentSelect) and invoice inbox workspace
- Add invoice-inbox utilities and type decoupling tests
- Fix NE-bilaga, SRU export, and invoice PDF template type usage
- Update CLAUDE.md with expanded architecture documentation

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/api/bookkeeping/mapping-rules/evaluate/route.ts

@@ -1,6 +1,8 @@
 import { createClient } from '@/lib/supabase/server'
 import { NextResponse } from 'next/server'
 import { evaluateMappingRules } from '@/lib/bookkeeping/mapping-engine'
+import { validateBody } from '@/lib/api/validate'
+import { EvaluateMappingRulesSchema } from '@/lib/api/schemas'
 import type { Transaction } from '@/types'
 
 export async function POST(request: Request) {
@@ -11,12 +13,14 @@ export async function POST(request: Request) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 
-  const body = await request.json()
+  const validation = await validateBody(request, EvaluateMappingRulesSchema)
+  if (!validation.success) return validation.response
+  const body = validation.data
 
   // Accept either a transaction ID or raw transaction data
   let transaction: Transaction
 
-  if (body.transaction_id) {
+  if ('transaction_id' in body) {
     const { data, error } = await supabase
       .from('transactions')
       .select('*')
@@ -30,7 +34,7 @@ export async function POST(request: Request) {
 
     transaction = data as Transaction
   } else {
-    transaction = body as Transaction
+    transaction = body as unknown as Transaction
   }
 
   try {