Validate Proforma Invoice lines in the controller

Proforma Invoices created via REST API skipped validation, allowing cancelled orders and mismatched amounts.