Validate POS Settings invoice and search fields on the server

API requests could store invalid fields or excluded items in POS Settings, bypassing browser validation.