Add setting to make zod schemas strict (.strict())

If true, you append `.strict()` so they don't accept extra fields. Which is pretty much what one would want, if those payloads get passed through to a GraphQL server, or re-validated in one. I'd go as far as saying it should be strict by default. But maybe for backwards compat you make it default to non-strict