bruno: regenerate collection from canonical docs + permanent docs↔Bruno parity gate

WO4. The old collection was the drifted artifact AGENTS.md warned about:
bodies pre-truncated at their first {{var}}, routes renamed server-side
but not here (/api/notes/:media_id, /api/book-matching/search,
/api/collections/:id/rules/test), an orphan universal-progress suite for
routes that no longer exist.

scripts/gen_bruno_from_docs.py emits one OpenCollection request per
frontmatter'd endpoint doc (191 requests): gate-verified example-request
JSON as body, {{env}} params per the environment file, device-token
routes get an explicit Bearer {{device_token}} header, login/register/
refresh keep the token-capture after-response scripts that chain the
collection. Old 1:1 mirrors deleted (128); hand-authored NewDevDBSetup,
environments, and edge-case suites kept. 30 scenario files with
truncated bodies (the documented corruption) deleted — they could not
run.

internal/docs/drift_test.go gains TestBrunoMirrorsDocs: every
frontmatter'd doc must have a Bruno request with matching method+URL
shape — the collection can never silently drift from the docs again.
opencollection.yml README block replaced with the real run instructions.

make test green (9 pkgs, parity test included in internal/docs).

bruno/koreader/sync_bookmarks.yml

@@ -0,0 +1,53 @@
+info:
+  name: Sync Bookmarks
+  type: http
+  seq: 9
+
+http:
+  method: POST
+  url: '{{base_url}}/api/sync/koreader/bookmarks'
+  auth: inherit
+  body:
+    type: json
+    data: |-
+      {
+        "book_sha256": "64-hex-char-sha256",
+        "bookmarks": [
+          {
+            "chapter": 3,
+            "datetime": "2026-08-20T10:00:00Z",
+            "pos0": "/body/Doc[4]/Sec[2]",
+            "page": 25,
+            "text": "",
+            "type": "bookmark",
+            "percentage": 0.125
+          }
+        ],
+        "highlights": [
+          {
+            "datetime": "2026-08-20T10:05:00Z",
+            "pos0": "/body/Doc[4]/Sec[2]/text()[3]:0",
+            "pos1": "/body/Doc[4]/Sec[2]/text()[3]:42",
+            "text": "Text to remember",
+            "notes": "Why this matters",
+            "type": "highlight",
+            "color": "blue",
+            "dedup_key": "echo-key-from-server"
+          }
+        ]
+      }
+  headers:
+  - key: Authorization
+    value: Bearer {{device_token}}
+settings:
+  encodeUrl: true
+  timeout: 0
+  followRedirects: true
+  maxRedirects: 5
+
+docs: |-
+  # Sync Bookmarks
+
+  `POST /api/sync/koreader/bookmarks` — auth: device-token.
+
+  Canonical reference: `docs/developer/api/koreader/sync_bookmarks.md` (docs site → Developer → API). This request is GENERATED from that doc; edit the doc, not this file.