fix(bruno): convert drifted body keys to body.data — CLI scenario runs now carry bodies

Follow-up to the sweep route audit, correcting its diagnosis: the CLI
DOES read .yml bodies — via OpenCollection's `body.data` string form
(the NewDevDBSetup script always worked because it used it). The
failing scenario POSTs used `body.json` (structured) / `body.jsonBody`
(string) — keys the CLI silently ignores, sending Content-Length: 0
with form-urlencoded content-type, so every server bind failed.

- 81 bodies converted to data-form (json maps serialized; jsonBody
  strings kept verbatim, {{vars}} intact).
- 6 pre-existing TRUNCATED payloads repaired: the original generator
  cut bodies at the first {{var}} (every SHA-256-identified scenario
  plus Sync Progress/Sync Bookmarks shipped mid-JSON and 400'd from
  day one). Rewritten whole, faithful to each file's documented
  purpose; book_sha256/book_uuid added to the environment.
- environments: opds_base_url correction from the sweep retained.

Verified live against the rebuilt dev container: the full koreader
scenario tree runs green through `bru run` — 14/14 (202s across
immediate/checkpoint/SHA-256 progress, 200s bookmarks, highlights,
notes; SHA-256 book identification exercised against a real
file_sha256).

bruno/sidecar/Update System Configuration.yml

@@ -8,35 +8,8 @@ http:
   auth: inherit
   body:
     type: json
-    jsonBody: "{\n    \"base_url\": \"https://bookhoard.example.com\",\n    \"opds_base_url\"\
-      : \"https://bookhoard.example.com/opds\",\n    \"api_base_url\": \"https://bookhoard.example.com/api\""
+    data: "{\n    \"base_url\": \"https://bookhoard.example.com\",\n    \"opds_base_url\": \"https://bookhoard.example.com/opds\",\n    \"api_base_url\": \"https://bookhoard.example.com/api\""
   headers:
   - key: Authorization
     value: Bearer {{admin_token
-
-docs: |-
-  ## Update System Configuration
-  
-    Updates system-wide configuration settings for the Bookhoard instance.
-  
-    **Method:** PUT
-  
-    **Endpoint:** /api/system/config
-  
-    **Authentication:** Bearer token (admin only)
-  
-    **Request Body:**
-    - `base_url` (string): Base URL for the instance
-    - `opds_base_url` (string): OPDS endpoint base URL
-    - `api_base_url` (string): API endpoint base URL
-  
-    **Response:**
-    - `status` (string): Update status
-    - `config` (object): Updated configuration
-  
-    **Status Codes:**
-    - 200: Success
-    - 400: Invalid configuration
-    - 401: Unauthorized
-    - 403: Forbidden (admin only)
-    - 500: Internal server error
+docs: "## Update System Configuration\n\n  Updates system-wide configuration settings for the Bookhoard instance.\n\n  **Method:** PUT\n\n  **Endpoint:** /api/system/config\n\n  **Authentication:** Bearer token (admin only)\n\n  **Request Body:**\n  - `base_url` (string): Base URL for the instance\n  - `opds_base_url` (string): OPDS endpoint base URL\n  - `api_base_url` (string): API endpoint base URL\n\n  **Response:**\n  - `status` (string): Update status\n  - `config` (object): Updated configuration\n\n  **Status Codes:**\n  - 200: Success\n  - 400: Invalid configuration\n  - 401: Unauthorized\n  - 403: Forbidden (admin only)\n  - 500: Internal server error"