[Backend] Persist API validation metrics for invalid responses

[floxxih]

The frontend validation layer already logs malformed payloads. Add backend-side metrics so repeated contract violations can be tracked and alerted on.

Acceptance criteria:

• Count validation failures by endpoint or schema.
• Expose metrics to the existing observability stack.
• Keep sensitive payload data out of metric labels.