[ISSUE]: safe_get_json inconsistent contract for JSON root types #469

Description

Issue: The function only enforces that the JSON root is an object (dict) when force=False. If a caller ever sets force=True (or relies on the current semantics), arrays/primitives can pass, breaking downstream validation expectations.

Fix: Add a new parameter like require_object: bool = True and enforce dict-root unconditionally when enabled; update callers/tests that truly need non-object roots.

Additional Context

No response