[APPS-406] Add validation for hidden params

Apps should be rejected if a hidden parameter is set as required.

JIRA: https://zendesk.atlassian.net/browse/APPS-406

Related to: https://github.com/zendesk/zendesk_app_market/pull/258

/cc @liulikun @jwswj