Ensure dive validation rule is present on API resource fields where necessary

[mansam]

The validator used by Gin will validate nested structs, but will not validate a slice of structs unless the binding field tag specifies the dive keyword. This means that things like lists of refs are not being validated correctly. We need to make a pass through the API and ensure that the dive key is present on every slice that needs to be validated.