fix: add providerOverrides to settings API schema
The providerOverrides field was missing from:
- GET /user/settings response
- POST /user/settings validation schema
- POST /settings validation schema
This prevented the provider selection from being persisted to the database.
