perf(request): allocate #validatedData lazily

Approve — clean lazy-init optimization. The | undefined type edit, ??= write guard, and ?. read guard move in lockstep; both access sites are updated, and the common path (no validator) now pays zero allocation instead of one {} per request.