Update `/validate` contract

[CalebCourier]

The /validate endpoint's POST body, ValidatePayload, should match the args and kwargs accepted by Guard.__call__, Guard.parse, and Guard.validate. This will ensure interaction with the open source and the server are as close to 1:1 as possible.

We currently accept all possible args as additionalProperties, but this is not self-documenting.