feat: PEG-2146 more formats support and ccapi doc update

[james-garrett]

This (first 3 points below) was done sometime ago, but i forgot to do the fork PR at that time.

• Would start to open this door with later possible more api doc json update

Updates

1. specs/ccapi_uat_20241025.json vs specs/cc_api_uat_20241025_update.json

   • ccapi_uat_20241025.json is the original openapi json file downloaded from uat api doc page (on 25/10)
   • cc_api_uat_20241025_update.json is the real one to deploy
     • It has been tweaked with 10+ validation errors (from addtionalProperty vs $ref) - details see vimdiff in ccapi_uat_update_diff_by1025.html (temp tracked from git)
     • SPEC_FILE=./specs/cc_api_uat_20241025_update.json docker compose up --build

2. update in compose.yml to allow SPEC_FILE to pass in

3. some debug 'prints' in app.ts, which could be removed later

4. new from 20250716 👇

   • cleanup and wording update to satisfy Sonar check
   • BEGIN RSA PRIVATE KEY -> BEGIN EXAMPLE RSA PRIVATE KEY to break Sonar pattern mapping

5. PEG-2146 from 20250716 👇

   • Added support for string formats using ajv-formats.
   • Added custom formats - ObjectId, hostname, JSON and datetime (YYYY-MM-DDTHH:mm:ss.sssZ) with validators
   • ajv format ref -> https://ajv.js.org/guide/formats.html

[github-actions]

Library Vulnerability scan results

The following vulnerabilities have been found in libraries included in the repository (some might be dependencies of dependencies).

Critical 🔴 and High 🟡 severity vulnerabilities must be fixed before the PR can be merged, even if they are dependencies of dependencies.

Library	Vulnerable version	Severity	Fix version	Vulnerability ID
@eslint/plugin-kit	0.3.3	Low	0.3.4	GHSA-xffm-g5w8-qvg7

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Library Vulnerability scan results

The following vulnerabilities have been found in libraries included in the repository (some might be dependencies of dependencies).

Critical 🔴 and High 🟡 severity vulnerabilities must be fixed before the PR can be merged, even if they are dependencies of dependencies.

Library	Vulnerable version	Severity	Fix version	Vulnerability ID