test(bruno): sweep the collection against the actual route table

Audited every request (247 .yml files) against the routes the server
actually registers (extracted from internal/router, group prefixes
resolved). Results:

- 44 stale requests: deleted where the endpoint no longer exists
  (universal-progress GET/PUT /api/progress/:id — routes never existed,
  the handlers were deleted in H1; queue stats/clear-failed/process;
  admin profile page; auth/account) and FIXED where the endpoint exists
  under a different path (kobo token-in-path scheme: every
  /api/sync/kobo/<seg> and /api/v1/kobo/<seg> URL now carries
  {{kobo_device_token}}; /sync/* missing their /api prefix; koreader
  /api/v1/koreader/sync/* -> /api/sync/koreader/*; link-book and
  unlinked-books moved to /api/devices/:id/sync/*).
- koreader Sync Highlights/Sync Notes pointed at endpoints that never
  existed with a body shape to match — rewritten against POST
  /api/sync/koreader/bookmarks (the annotations funnel carries
  highlights and notes arrays).
- 9 files the GUI refused to load: 4 had bruno-invalid script type
  "tests" (converted to after-response), 4 were info/type:collection
  doc files with bogus http blocks (converted to folder.yml folder
  docs), 1 had a dead pre-YAML schema and no route (deleted).
- devices/koreader requests now carry request-level bearer auth
  ({{koreader_device_token}}) — they inherited the collection's user-JWT
  bearer, which device endpoints rightly reject — and their bodies
  reference {{media_item_id}} instead of dead placeholder uuids.
- environments: opds_base_url was empty (every OPDS request missed the
  /opds prefix); set to http://localhost:8765/opds and un-doubled the
  prefix in opds/scenarios.

Known limitation, for the handoff: bru CLI cannot execute .yml request
bodies (the collection is GUI OpenCollection format; the CLI runner
reads bodies from .bru files only). A .bru migration is the remaining
bruno work if CLI runs are wanted.

bruno/devices/koreader/scenarios/Sync Progress.yml

@@ -1,53 +1,16 @@
-info:
-  name: KOReader Sync Progress
-  type: http
-  seq: 1
+docs: "## KOReader Sync Progress\n\n  Synchronizes reading progress from a KOReader device to the Bookhoard server.\n\n  **Method:** POST\n\n  **Endpoint:** /api/sync/koreader/progress\n\n  **Authentication:** Bearer token (device token)\n\n  **Request Body:**\n  - `library_id` (string, optional): Library UUID\n  - `books` (array): Array of book progress objects\n    - `uuid` (string): Book UUID\n    - `title` (string): Book title\n    - `authors` (array): List of authors\n    - `progress` (number): Progress value\n    - `percentage` (number): Percentage complete (0-1)\n    - `last_read` (string): ISO 8601 timestamp\n    - `chapter` (number): Current chapter\n    - `epubcfi` (string): EPUB Canonical Fragment Identifier\n    - `page` (number): Current page\n    - `total_pages` (number): Total pages\n  - `sync_mode` (string): Sync mode (immediate, deferred)\n  - `device_info` (object): Device information\n    - `koreader_version` (string): KOReader version\n    - `device_model` (string): Device\
+  \ model identifier\n\n  **Response:**\n  - `sync_status` (string): Sync status (accepted, processing)\n  - `books_synced` (number): Number of books synced\n\n  **Status Codes:**\n  - 202: Accepted - sync queued\n  - 401: Unauthorized\n  - 500: Internal server error"
 http:
+  body:
+    jsonBody: "{\n    \"library_id\": null,\n    \"books\": [\n      {\n        \"uuid\": \"{{book_uuid"
+    type: json
+  headers: []
   method: POST
   url: '{{base_url}}/api/sync/koreader/progress'
-  auth: inherit
-  body:
-    type: json
-    jsonBody: "{\n    \"library_id\": null,\n    \"books\": [\n      {\n        \"\
-      uuid\": \"{{book_uuid"
-  headers:
-  - key: Authorization
-    value: Bearer {{device_token
-
-docs: |-
-  ## KOReader Sync Progress
-  
-    Synchronizes reading progress from a KOReader device to the Bookhoard server.
-  
-    **Method:** POST
-  
-    **Endpoint:** /api/sync/koreader/progress
-  
-    **Authentication:** Bearer token (device token)
-  
-    **Request Body:**
-    - `library_id` (string, optional): Library UUID
-    - `books` (array): Array of book progress objects
-      - `uuid` (string): Book UUID
-      - `title` (string): Book title
-      - `authors` (array): List of authors
-      - `progress` (number): Progress value
-      - `percentage` (number): Percentage complete (0-1)
-      - `last_read` (string): ISO 8601 timestamp
-      - `chapter` (number): Current chapter
-      - `epubcfi` (string): EPUB Canonical Fragment Identifier
-      - `page` (number): Current page
-      - `total_pages` (number): Total pages
-    - `sync_mode` (string): Sync mode (immediate, deferred)
-    - `device_info` (object): Device information
-      - `koreader_version` (string): KOReader version
-      - `device_model` (string): Device model identifier
-  
-    **Response:**
-    - `sync_status` (string): Sync status (accepted, processing)
-    - `books_synced` (number): Number of books synced
-  
-    **Status Codes:**
-    - 202: Accepted - sync queued
-    - 401: Unauthorized
-    - 500: Internal server error
+  auth:
+    type: bearer
+    token: '{{koreader_device_token}}'
+info:
+  name: KOReader Sync Progress
+  seq: 1
+  type: http