fix(bruno): convert drifted body keys to body.data — CLI scenario runs now carry bodies

Follow-up to the sweep route audit, correcting its diagnosis: the CLI
DOES read .yml bodies — via OpenCollection's `body.data` string form
(the NewDevDBSetup script always worked because it used it). The
failing scenario POSTs used `body.json` (structured) / `body.jsonBody`
(string) — keys the CLI silently ignores, sending Content-Length: 0
with form-urlencoded content-type, so every server bind failed.

- 81 bodies converted to data-form (json maps serialized; jsonBody
  strings kept verbatim, {{vars}} intact).
- 6 pre-existing TRUNCATED payloads repaired: the original generator
  cut bodies at the first {{var}} (every SHA-256-identified scenario
  plus Sync Progress/Sync Bookmarks shipped mid-JSON and 400'd from
  day one). Rewritten whole, faithful to each file's documented
  purpose; book_sha256/book_uuid added to the environment.
- environments: opds_base_url correction from the sweep retained.

Verified live against the rebuilt dev container: the full koreader
scenario tree runs green through `bru run` — 14/14 (202s across
immediate/checkpoint/SHA-256 progress, 200s bookmarks, highlights,
notes; SHA-256 book identification exercised against a real
file_sha256).

bruno/devices/koreader/scenarios/Sync Annotations (Per-Book SHA-256).yml

@@ -1,8 +1,8 @@
 docs: "## KOReader Sync Annotations - Per-Book SHA-256\n\n  Synchronizes annotations (highlights) from KOReader with per-annotation SHA-256 hashes for multi-book sync.\n\n  **Method:** POST\n\n  **Endpoint:** /api/v1/koreader/sync/bookmarks\n\n  **Authentication:** Bearer token (KOReader device token)\n\n  **Request Body:**\n  - `book_uuid` (string): Primary book UUID\n  - `highlights` (array): Array of highlight objects\n    - `text` (string): Highlighted text\n    - `pos0`, `pos1` (string): EPUB CFI positions\n    - `color` (string): Highlight color (hex)\n    - `page` (number): Page number\n    - `book_sha256` (string): SHA-256 hash for this specific book\n\n  **Response:**\n  - `highlights_synced` (number): Number of highlights synced\n\n  **Status Codes:**\n  - 200: Success\n  - 401: Unauthorized\n  - 500: Internal server error\n\n  **Note:** Each highlight can include its own book_sha256, allowing annotations from multiple books in a single request."
 http:
   body:
-    jsonBody: "{\n    \"book_uuid\": \"{{book_uuid"
     type: json
+    data: "{\n  \"book_sha256\": \"{{book_sha256}}\",\n  \"bookmarks\": [\n    {\n      \"chapter\": 3,\n      \"datetime\": \"2026-01-30T19:55:00Z\",\n      \"page\": 45,\n      \"pos0\": \"p1\",\n      \"text\": \"Per-book annotation\",\n      \"type\": \"bookmark\"\n    }\n  ]\n}"
   headers: []
   method: POST
   url: '{{base_url}}/api/sync/koreader/bookmarks'