refactor(bruno): reorganize file structure from bruno-yaml to flat bruno directory

- Move all files from bruno-yaml/* to bruno/*
- Maintains existing directory structure within categories
- Updates bruno/user/auth files with OAuth2 refresh token flow
- Updates bruno/user/profile files for user profile management
- Adds bruno/dashboard/ directory with dashboard API tests
- Preserves all existing test scenarios and OpenCollection YAML format
- No functional changes - file reorganization only

bruno/devices/scenarios/List Pending Registrations.yml

@@ -0,0 +1,46 @@
+info:
+  name: Get Pending Registrations
+  type: http
+  seq: 11
+
+http:
+  method: GET
+  url: '{{base_url}}/api/devices/pending'
+  auth: inherit
+
+docs: |-
+  ## Get Pending Registrations
+
+  Retrieves all pending device registration requests awaiting approval.
+
+  **Method:** GET
+
+  **Endpoint:** /api/devices/pending
+
+  **Authentication:** Required (Bearer token)
+
+  **Response:**
+  - Array of pending registration objects:
+    - `registration_id` (string): Registration UUID
+    - `device_name` (string): Name of the device
+    - `device_type` (string): `kobo`, `koreader`, or `web`
+    - `device_identifier` (string): Device ID (may be masked)
+    - `created_at` (string): Request timestamp
+    - `expires_at` (string): Expiration timestamp
+    - `status` (string): Always `pending`
+
+  **Status Codes:**
+  - 200: Success
+  - 401: Unauthorized
+
+  **Use Cases:**
+  - Show pending registrations in user settings
+  - Allow users to review devices before approval
+  - Display registration request details
+  - Provide approve/reject actions
+
+  **Security Notes:**
+  - Full device identifier may be partially masked
+  - Only shows registrations for authenticated user
+  - Expired registrations are automatically removed
+  - Users can only see their own pending registrations