Contract checks.

Review:
- required vs optional fields
- enum safety
- nested object constraints
- server-owned fields
- pagination shape
- response DTO exposure
- consistent error structure

Watch for:
- silent breaking changes
- entity leakage
- weak partial-update DTOs
- inconsistent list/detail responses