docs(dlp): retry upstream-blocked sub-issues against fresh tenant

[cdot65]

Summary

• Re-probed 12 DLP sub-issues under epic Epic: backfill examples for remaining 61 commands missing docs #127 / category docs(dlp): root-cause + sub-issues for 12 missing examples #128 against fresh DLP-licensed tenant (1852583913).
• Landed a curated input/output example for runtime dlp filtering-profiles replace (closes docs: runtime dlp filtering-profiles replace (upstream-bug) #189) + JSON body fixture; removed from .missing-allowlist.
• Verified the other 11 sub-issues (docs: runtime dlp patterns get (upstream-bug) #181–docs: runtime dlp filtering-profiles get (CLI bug — partial) #188, docs: runtime dlp dictionaries create (upstream-bug) #190–docs: runtime dlp dictionaries replace (upstream-bug) #192) still reproduce the same upstream 400s (DLP: patterns get and profiles get blocked by upstream API 400 #80, DLP: patterns replace and patterns patch blocked by upstream API 400 #98, DLP: dictionaries create / replace / patch upstream API returns 400/500 for OpenAPI-conformant requests #99, DLP: profiles create / replace / patch blocked by upstream API 400 #101) and CLI key-mangling bug (DLP: filtering-profiles get JSON/YAML output mangles object keys #105) on the fresh tenant; bodies updated with fresh retry evidence and .missing-allowlist entries retained with tracking links.

Closes #189. Updates #128. Part of epic #127.

Test plan

• pnpm docs:gen regenerates docs/cli/runtime/dlp/filtering-profiles.md with the new example
• pnpm format clean
• pnpm docs:check passes (124 commands, 60 on allowlist — one less than before)
• Live capture against tenant 1852583913 verified against airs --debug API log
• Tenant cleanup: seed pattern-docs-test archived; no *-docs-test resources active; predefined SOX filtering profile restored to canonical 35 file_types

[cdot65]

DLP retry summary — tenant 1852583913 (fresh, DLP license active)

Landed (1)

• ✅ docs: runtime dlp filtering-profiles replace (upstream-bug) #189 runtime dlp filtering-profiles replace — PUT returns 200; example + body fixture captured.

Still upstream-blocked, evidence updated (11)

All 11 still return the same errors on the fresh tenant as on the original capture tenant. .missing-allowlist entries kept with # Blocked by … comments.

Sub-issue	Command	Symptom	Upstream tracker
#181	runtime dlp patterns get	API 400 on GET /v2/api/data-patterns/{id}	#80
#182	runtime dlp patterns patch	Same 400 on pre-PATCH GET	#98
#183	runtime dlp patterns replace	Same 400 on pre-PUT GET	#98
#184	runtime dlp profiles get	API 400 on GET /v2/api/data-profiles/{id}	#80
#185	runtime dlp profiles create	API 400 on POST (basic + advanced + multi shapes all fail)	#101
#186	runtime dlp profiles patch	Same 400	#101
#187	runtime dlp profiles replace	Same 400	#101
#188	runtime dlp filtering-profiles get	CLI snake_case bug (datarofile, scanype, fileased, nonileased, fileypes)	#105
#190	runtime dlp dictionaries create	API 400 on multipart POST	#99
#191	runtime dlp dictionaries patch	Same 400	#99
#192	runtime dlp dictionaries replace	Same 400	#99

Tenant hygiene

• Seed pattern-docs-test (id 6a1480b56611b684f661b013) archived. No active *-docs-test resources remain.
• Predefined SOX filtering profile temporarily mutated during docs: runtime dlp filtering-profiles replace (upstream-bug) #189 probe was restored to canonical 35 file_type entries (version bumped 1→3 due to the restore PUT; functional content identical).
• No DLP profile or dictionary seed got created — those POSTs all 400.

Next steps

• 11 sub-issues remain open against the existing upstream/CLI trackers (DLP: patterns get and profiles get blocked by upstream API 400 #80, DLP: patterns replace and patterns patch blocked by upstream API 400 #98, DLP: dictionaries create / replace / patch upstream API returns 400/500 for OpenAPI-conformant requests #99, DLP: profiles create / replace / patch blocked by upstream API 400 #101, DLP: filtering-profiles get JSON/YAML output mangles object keys #105).
• No new tracker issues were filed — every failure mode matches the existing tracker for that sub-issue.