test(validation): check query validation boundaries for org param (JhaSourav07#2262)

## Description

Fixes JhaSourav07#1437
Program: GSSoC 2026

This PR handles the implementation of validation boundary unit testing
for the incoming `?org=` query parameter under variation 2.

Previously, normal organization string parameters were evaluated, but
passing explicit spaces and format violations required isolated boundary
test coverage to guarantee input schema safety.

### Changes Made

* Added 1 target schema validation boundary test case inside
`lib/validations.test.ts`.
* Mocked an invalid parameter payload passing an organization
configuration value set to `'invalid_org_name_with_spaces'`.
* Asserted that the system validation layer catches the alphanumeric
format violation using `.safeParse()` to align with repository design
guidelines.

### Why this matters

Secures internal endpoint ingestion routers from processing out-of-bound
organization string formats, ensuring the routing engine is protected
against unexpected upstream runtime issues or malicious injections.

## Pillar

- [ ] 🎨 Pillar 1 — New Theme Design
- [ ] 📐 Pillar 2 — Geometric SVG Improvement
- [ ] 🕐 Pillar 3 — Timezone Logic Optimization
- [x] 🛠️ Other (Bug fix, refactoring, docs)

## Checklist before requesting a review:

- [x] I have read the `CONTRIBUTING.md` file.
- [x] I have tested these changes locally (`npm run test`).
- [x] I have run `npm run format` and `npm run lint` locally and
resolved all errors (CI will fail otherwise).
- [x] My commits follow the Conventional Commits format (e.g.,
`feat(themes): ...`, `fix(calculate): ...`).
- [ ] I have updated `README.md` if I added a new theme or URL
parameter.
- [x] I have starred the repo.
- [x] I have made sure that i have only one commit to merge in this PR.
- [x] The SVG output matches the CommitPulse "premium quality" aesthetic
standard (no raw elements, smooth animations, correct fonts).
- [x] (Recommended) I joined the CommitPulse Discord server for faster
collaboration, mentorship, and PR support.

Author: JhaSourav07

lib/validations.test.ts

@@ -771,6 +771,18 @@ describe('streakParamsSchema — org parameter validation', () => {
       expect(fieldError).toBe('Invalid organization name format');
     }
   });
+
+  it('should reject org parameter with invalid alphanumeric format', () => {
+    const result = streakParamsSchema.safeParse({
+      user: 'octocat',
+      org: 'invalid_org_name_with_spaces',
+    });
+
+    expect(result.success).toBe(false);
+    if (!result.success) {
+      expect(result.error.flatten().fieldErrors.org?.[0]).toBe('Invalid organization name format');
+    }
+  });
 });
 
 describe('ogParamsSchema', () => {