AJV strict-mode warnings in tests

[david-rocca]

Evidence:

• Unit tests pass but emit AJV strict-mode warnings for CVE schemas and BaseUser active field schema usage.

Recommendation:

• Either update schemas to satisfy strict mode or configure AJV strict options intentionally.
• Make the choice explicit so warnings do not hide future schema issues.