Follow-ups from review of the v0.8.12 release PR, all on surfaces the CLI
audit touched.
- `credentialId` was one shared schema across PATCH and DELETE, so the
disconnect reference offered "update or disconnect" for an operation that
cannot update. Split into two, matching the two components OpenAPI already
publishes for them.
- A boolean query param documents the spellings an HTTP caller may send and
closes by calling them the whole accepted set. The CLI renders those fields
as bare flags that take no value, leaving the sentence pointing at a list
neither `--help` nor the reference ever prints. Stripped for bare flags only;
the REST prose and OpenAPI specs are unchanged.
- `files list --recursive` became a bare switch in the audit, which removed the
only way to send false. The API turns it on by itself as soon as `--search`
is set, so a folder search always descended. The twin is back, declared per
flag so the one-way toggles do not grow a meaningless negation.