test(bruno): sweep the collection against the actual route table

Audited every request (247 .yml files) against the routes the server
actually registers (extracted from internal/router, group prefixes
resolved). Results:

- 44 stale requests: deleted where the endpoint no longer exists
  (universal-progress GET/PUT /api/progress/:id — routes never existed,
  the handlers were deleted in H1; queue stats/clear-failed/process;
  admin profile page; auth/account) and FIXED where the endpoint exists
  under a different path (kobo token-in-path scheme: every
  /api/sync/kobo/<seg> and /api/v1/kobo/<seg> URL now carries
  {{kobo_device_token}}; /sync/* missing their /api prefix; koreader
  /api/v1/koreader/sync/* -> /api/sync/koreader/*; link-book and
  unlinked-books moved to /api/devices/:id/sync/*).
- koreader Sync Highlights/Sync Notes pointed at endpoints that never
  existed with a body shape to match — rewritten against POST
  /api/sync/koreader/bookmarks (the annotations funnel carries
  highlights and notes arrays).
- 9 files the GUI refused to load: 4 had bruno-invalid script type
  "tests" (converted to after-response), 4 were info/type:collection
  doc files with bogus http blocks (converted to folder.yml folder
  docs), 1 had a dead pre-YAML schema and no route (deleted).
- devices/koreader requests now carry request-level bearer auth
  ({{koreader_device_token}}) — they inherited the collection's user-JWT
  bearer, which device endpoints rightly reject — and their bodies
  reference {{media_item_id}} instead of dead placeholder uuids.
- environments: opds_base_url was empty (every OPDS request missed the
  /opds prefix); set to http://localhost:8765/opds and un-doubled the
  prefix in opds/scenarios.

Known limitation, for the handoff: bru CLI cannot execute .yml request
bodies (the collection is GUI OpenCollection format; the CLI runner
reads bodies from .bru files only). A .bru migration is the remaining
bruno work if CLI runs are wanted.

bruno/devices/koreader/scenarios/Sync Progress - Single Book.yml

@@ -1,92 +1,31 @@
-info:
-  name: Sync Progress - Single Book
-  type: http
-  seq: 1
-
+docs: "## Sync KOReader Progress - Single Book\n\nSynchronizes reading progress for a single book from KOReader device.\n\n**Method:** POST\n\n**Endpoint:** /api/sync/koreader/progress\n\n**Authentication:** Bearer token (koreader_device_token)\n\n**Request Body:**\n- `library_id` (string, optional): Library UUID for multi-library setups\n- `books` (array): Array with single book progress\n  - `uuid` (string): Unique book identifier (often SHA-256 hash)\n  - `title` (string): Book title\n  - `authors` (array): List of authors\n  - `progress` (number): Progress decimal (0.0 to 1.0)\n  - `percentage` (number): Progress percentage (0.45 = 45%)\n  - `last_read` (string): ISO 8601 timestamp of last read\n  - `chapter` (integer): Current chapter number\n  - `epubcfi` (string): EPUB Canonical Fragment Identifier\n  - `character` (integer): Character position in book\n  - `page` (integer, optional): Current page number\n\n**Response:**\n- `synced` (integer): Number of books synced\n- `timestamp`\
+  \ (string): Server sync timestamp\n- `books` (array): Sync results\n  - `uuid` (string): Book UUID\n  - `status` (string): `synced`, `updated`, `skipped`\n  - `server_progress` (object): Server-side progress data\n\n**Status Codes:**\n- 200: Success\n- 401: Unauthorized\n- 400: Invalid request format\n\n**KOReader Progress Tracking:**\n- SHA-256 based book identification (universal across devices)\n- EPUB CFI for precise location (standard format)\n- Chapter-based navigation\n- Character-level precision\n- Supports EPUB, FB2, PDF, DJVU, MOBI formats\n\n**EPUB CFI Format:**\n- Standardized location format for EPUBs\n- Example: `epubcfi(/6/4/2:15)`\n- Identifies exact position even after reflow\n- Works across different devices/apps\n- Preserved after file modifications\n\n**Book Identification:**\n- Primary: SHA-256 hash of book file\n- Universal: Same book = same UUID across devices\n- Format-agnostic: Works for any supported format\n- Case-sensitive: Hash must match exactly\n\n**Use Cases:**\n\
+  - Real-time page turn sync\n- Progress backup\n- Cross-device continuity\n- Reading time tracking\n- Chapter completion detection"
 http:
+  body:
+    json:
+      books:
+      - authors:
+        - Author Name
+        chapter: 3
+        character: 15432
+        epubcfi: epubcfi(/6/4/2:15)
+        last_read: '2026-01-30T20:00:00Z'
+        percentage: 0.45
+        progress: 0.45
+        title: Book Title
+        uuid: '{{media_item_id}}'
+      library_id: optional-library-uuid
+    type: json
+  headers:
+  - key: Content-Type
+    value: application/json
   method: POST
   url: '{{base_url}}/api/sync/koreader/progress'
-  auth: inherit
-  headers:
-    - key: Content-Type
-      value: application/json
-  body:
-    type: json
-    json:
-      library_id: optional-library-uuid
-      books:
-        - uuid: book-uuid-here
-          title: Book Title
-          authors:
-            - Author Name
-          progress: 0.45
-          percentage: 0.45
-          last_read: '2026-01-30T20:00:00Z'
-          chapter: 3
-          epubcfi: 'epubcfi(/6/4/2:15)'
-          character: 15432
-
-docs: |-
-  ## Sync KOReader Progress - Single Book
-
-  Synchronizes reading progress for a single book from KOReader device.
-
-  **Method:** POST
-
-  **Endpoint:** /api/sync/koreader/progress
-
-  **Authentication:** Bearer token (koreader_device_token)
-
-  **Request Body:**
-  - `library_id` (string, optional): Library UUID for multi-library setups
-  - `books` (array): Array with single book progress
-    - `uuid` (string): Unique book identifier (often SHA-256 hash)
-    - `title` (string): Book title
-    - `authors` (array): List of authors
-    - `progress` (number): Progress decimal (0.0 to 1.0)
-    - `percentage` (number): Progress percentage (0.45 = 45%)
-    - `last_read` (string): ISO 8601 timestamp of last read
-    - `chapter` (integer): Current chapter number
-    - `epubcfi` (string): EPUB Canonical Fragment Identifier
-    - `character` (integer): Character position in book
-    - `page` (integer, optional): Current page number
-
-  **Response:**
-  - `synced` (integer): Number of books synced
-  - `timestamp` (string): Server sync timestamp
-  - `books` (array): Sync results
-    - `uuid` (string): Book UUID
-    - `status` (string): `synced`, `updated`, `skipped`
-    - `server_progress` (object): Server-side progress data
-
-  **Status Codes:**
-  - 200: Success
-  - 401: Unauthorized
-  - 400: Invalid request format
-
-  **KOReader Progress Tracking:**
-  - SHA-256 based book identification (universal across devices)
-  - EPUB CFI for precise location (standard format)
-  - Chapter-based navigation
-  - Character-level precision
-  - Supports EPUB, FB2, PDF, DJVU, MOBI formats
-
-  **EPUB CFI Format:**
-  - Standardized location format for EPUBs
-  - Example: `epubcfi(/6/4/2:15)`
-  - Identifies exact position even after reflow
-  - Works across different devices/apps
-  - Preserved after file modifications
-
-  **Book Identification:**
-  - Primary: SHA-256 hash of book file
-  - Universal: Same book = same UUID across devices
-  - Format-agnostic: Works for any supported format
-  - Case-sensitive: Hash must match exactly
-
-  **Use Cases:**
-  - Real-time page turn sync
-  - Progress backup
-  - Cross-device continuity
-  - Reading time tracking
-  - Chapter completion detection
+  auth:
+    type: bearer
+    token: '{{koreader_device_token}}'
+info:
+  name: Sync Progress - Single Book
+  seq: 1
+  type: http