Pass the marketplace semgrep check

Clears 34 blocking semgrep findings for the version-3 release. Endpoints that committed writes by hand now take POST, and an import job scrubs table names during validation.