pub fn validate_patch(patch: &Value) -> Result<(), AppError>Expand description
Validate a JSON patch object before applying it to Settings.
Returns AppError::Validation if the patch violates any constraint.
This is the single validation gate; settings_update calls it before
merging and persisting.