fix(controller): validate app structure values

This guards against `deis ps:scale web=-1` and other bad input.