Get apivizsafe viz specschema

GET /viz/safe-viz-spec/schema — returns the SafeVizSpec JSON schema.

The frontend caches this for the session and uses it to drive form validation. Authentication required so the schema (and the enumerated module / scale lists) doesn’t leak via the public web.