Add fuzz testing, to make sure invalid json doesn't panic

[MathiasKoch]

Entering invalid json, or valid json that cannot be deserialized to the shadow state type, should never cause a panic.

Rather it would make sense to make a clean report shadow, while propagating some error to the user through handle_message