Added

Brand parameter and improved errors on POST /alert

POST /alert now accepts an explicit brand parameter to disambiguate which brand an alert belongs to when an organization protects multiple. Validation errors are now returned with clear messages instead of generic 500s.