Add serde(deny_unknown_fields) to all DTOs #235
Description
Typos happen, and the API shouldn’t silently ignore them. Otherwise it creates issues that people not familiar with the API might not understand easily. We should add serde(deny_unknown_fields) to all Data Transfer Objects that are accepted as request bodies.
As an example, I just PUT /v1/pod/config passing dasboard_url and it’s only when I tried to invite a member that I got a 412. The API should have refused the first call.