FIX(security): validate URL search parameter schema before Redux store injection (#2319)

[Talha12Shiekh]

Proposed Changes

Added URL parameter schema validation helpers (isValidURLValue and isValidParsedParam) in packages/web/src/components/basic/ReactiveBase.js to strictly validate parsed JSON query parameters before injecting them as initial selectedValues into the Redux store:

• Validates primitive types (string, number, boolean), primitive arrays, or expected object structures ({ value, category }).
• Rejects arbitrary object structures, prototype pollution attempts, or unexpected payload shapes parsed from URL query parameters.

Linked Issues

• Fixes security: user-controlled URL params injected directly into Redux store via JSON.parse #2319 (security: user-controlled URL params injected directly into Redux store via JSON.parse)

Checklist

• Describe the proposed changes and how it'll improve the library experience.
• Please make sure that there are no linting errors in the code.
• Add a demo video/gif/screenshot to explain how did you test the fix.
• If it is a global change, try to add any side effects that it could have.
• Create a PR to add/update the docs (if needed) at here.
• Create a PR to add/update the storybook (if needed) at here.

Improvements to the Library Experience

• Security: Prevents malicious/crafted URL parameter structures from polluting application state or triggering unexpected behavior in downstream components.

Side Effects

• None. Valid search parameter values (primitives, arrays, and { value, category } objects) continue to function as expected.