Validate requests and normalize domains

Validates allowed paths, monitoring windows and configuration payloads, requires POST for actions, and keeps domain rows consistent without duplicates.