fix(bruno): convert drifted body keys to body.data — CLI scenario runs now carry bodies

Follow-up to the sweep route audit, correcting its diagnosis: the CLI
DOES read .yml bodies — via OpenCollection's `body.data` string form
(the NewDevDBSetup script always worked because it used it). The
failing scenario POSTs used `body.json` (structured) / `body.jsonBody`
(string) — keys the CLI silently ignores, sending Content-Length: 0
with form-urlencoded content-type, so every server bind failed.

- 81 bodies converted to data-form (json maps serialized; jsonBody
  strings kept verbatim, {{vars}} intact).
- 6 pre-existing TRUNCATED payloads repaired: the original generator
  cut bodies at the first {{var}} (every SHA-256-identified scenario
  plus Sync Progress/Sync Bookmarks shipped mid-JSON and 400'd from
  day one). Rewritten whole, faithful to each file's documented
  purpose; book_sha256/book_uuid added to the environment.
- environments: opds_base_url correction from the sweep retained.

Verified live against the rebuilt dev container: the full koreader
scenario tree runs green through `bru run` — 14/14 (202s across
immediate/checkpoint/SHA-256 progress, 200s bookmarks, highlights,
notes; SHA-256 book identification exercised against a real
file_sha256).

bruno/NewDevDBSetup/SetBaseUrl.yml

@@ -2,37 +2,36 @@ info:
   name: SetBaseUrl
   type: http
   seq: 3
-
 http:
   method: PUT
   url: '{{base_url}}/api/system/config'
   auth: inherit
   body:
     type: json
-    jsonBody: |-
-      {
-        "base_url": "http://localhost:8765"
-      }
+    data: "{\n  \"base_url\": \"http://localhost:8765\"\n}"
   headers:
   - key: Authorization
     value: Bearer {{token}}
   - key: Content-Type
     value: application/json
-
 settings:
   encodeUrl: true
   timeout: 0
   followRedirects: true
   maxRedirects: 5
+docs: '## Set Base URL
 
-docs: |-
-  ## Set Base URL
 
-  Configures the server's base_url during initial dev database setup.
+  Configures the server''s base_url during initial dev database setup.
+
 
   Must be run after RegisterUser (which provides the auth token) and before
+
   any library/device creation (which require setup to be complete).
 
+
   **Method:** PUT
+
   **Endpoint:** /api/system/config
-  **Auth:** Bearer token (from RegisterUser)
+
+  **Auth:** Bearer token (from RegisterUser)'