test(contract): record cassettes + verify request-body shapes for new purchase/write endpoints

[millsmillsymills]

PRs #206, #207, #208 added new write/purchase tools whose outgoing request-body shapes are unverified against the live API — the mocked tests only assert the body the code currently sends, so a wrong field name would pass. Record cassettes by hand and confirm each shape.

Endpoints to record + verify

• gandi_domain_restore — restore POST body.
• gandi_domain_update_owner_contact — owner/registrant change; body assumed {"owner": {...}}. Verify the wrapper key.
• gandi_email_update_offer — offer PATCH body.
• gandi_email_renew_all_mailboxes — per-domain renew; body assumed {"duration": <years>}. Verify duration is the correct key.
• gandi_cert_* DCV / CRT / packages / update endpoints from feat(cert): DCV, CRT fetch, packages, update tools #208.

Notes

• Purchase endpoints are not covered by the existing read/non-purchasing cassette issues (test(contract): PR B — record cassettes for all 34 read endpoints #101/test(contract): PR C — record cassettes for all 29 non-purchasing write endpoints #102); this is the purchase-tier gap.
• Record carefully — these SPEND MONEY; use a throwaway/sandbox context where possible.

Follow-up from the review/merge cycle (CONSIDER items on #206/#207).

[millsmillsymills]

Doc-verification pass (no money spent)

Verified what could be verified without calling the paid endpoints:

Endpoint existence/method — confirmed via the checked-in live-docs snapshot (tests/data/raml_coverage_snapshot.json):

• post-v5-domain-domains-domain-restore ✓
• put-v5-domain-domains-domain-contacts-owner ✓
• post-v5-email-mailboxes-domain-renew ✓ (bulk), post-v5-email-mailboxes-domain-email-renew ✓ (single)

duration unit — fixed in #213. Gandi's rendered docs document email-renewal duration in months (1 or 12), not years. Both renew tool docstrings said "years"; corrected (wire value unchanged).

Still needs a live/sandbox call (the real blocker — these POST/PUT endpoints SPEND MONEY, so no cassette can be recorded without a paid op or a Gandi sandbox account):

1. POST /v5/email/mailboxes/{domain}/renew (renew-all) — Gandi docs show the body as type any with only a sharing_id example and no documented duration field. The tool sends {"duration": N}. Confirm whether the bulk endpoint honors duration or ignores it (if ignored, the duration param on gandi_email_renew_all_mailboxes is misleading and should be dropped).
2. PUT /v5/domain/domains/{domain}/contacts/owner — docs page did not render the body schema. The tool sends {"owner": <block>}. Confirm the owner block is wrapped under "owner" vs sent top-level.
3. POST /v5/domain/domains/{domain}/restore — confirm restore body shape.

Record cassettes for these against a sandbox/throwaway org when available.