Zod on the server and the client: the schema you define once and the three ways it breaks in runtime

Zod sells itself as "define once, validate everywhere." In Next.js 16 with Server Actions, edge middleware, and API routes, that's only partially true. Three concrete failure modes and the pattern that prevents them.