Evaluate Zod 4.0 migration

[alohays]

Zod 4.3.6 is available (current: 3.x). Extensive usage in config schema, merge engine, and all validation. Breaking API changes expected. Deferred from Dependabot PR #107. Requires careful migration plan.