[Cornelius128]

Summary

• Validate Stellar public keys before the export handler queries the database or builds response headers.
• Return a consistent HTTP 400 JSON error for malformed account IDs.
• Document the response and add local HTTP tests for valid and invalid keys.

Verification

• npm run test:account-validation passes.
• npx tsc --noEmit passes.

Fixes #79