Fix `source` inconsistency

[ramimac]

I noticed is that source is sometimes a static URL and other times it's an array.

• [ ] Standardize on arrays for source
• [ ] update schema and validator