CVV validation incorrect

[KianYang-Lee]

For the domain TacoOrder, as CVV needs to be 3 digits, the current validation presented does not check for the minimum digits required, rather only the maximum digits allowed.

Suggest to use the following regex pattern matching for constraint:

@Pattern(regexp = "^[0-9]{3}$", message = "Must be 3 digits")
private String ccCVV;