test: add Bruno API test collections for device authentication

- Device token regeneration tests (success, forbidden, not found, unauthorized)
- OPDS authentication tests (Bearer token, query token)
- Kobo sync tests with token authentication
- Test various authentication methods and error cases

bruno/sync-kobo/get-library-url-token.bru

@@ -0,0 +1,38 @@
+meta {
+  name: Get Library - URL Path Token
+  type: http
+  seq: 3
+}
+
+get {
+  url: {{base_url}}/sync/kobo/{{kobo_device_token}}/library
+  body: none
+  auth: none
+}
+
+docs {
+  ## Get Kobo Library - URL Path Token
+
+  Retrieves library metadata for Kobo device using token in URL path.
+
+  **Method:** GET
+
+  **Endpoint:** /sync/kobo/{kobo_device_token}/library
+
+  **Authentication:** URL path parameter (Kobo devices never send Bearer tokens)
+
+  **Path Parameters:**
+  - `kobo_device_token` (string): Device auth token from devices.auth_token
+
+  **Response:** Library metadata with book list
+
+  **Status Codes:**
+  - 200: Success (library metadata)
+  - 401: Unauthorized
+  - 403: Device sync disabled
+  - 404: Device not found
+
+  **Important:** Kobo devices use URL path token exclusively, never Bearer header
+
+  **Use Case:** Kobo devices retrieving library information via stock firmware
+}