How do you validate API endpoints using tools like Postman or REST Assured, including status codes, response payloads, and database state?
