fix(server): validate permission and question ids (#26456)

Parent: 8cbc43f

Committed by GitHub <noreply@github.com> on 5/9/2026, 4:20:28 AM