feat: bf config compatibility

[igor-grubic]

Changes Made

Adds brand-level LLMO config endpoints that bridge v2 customer configs with per-site v1 LLMO configs, enabling reading and writing v1 configs scoped to a brand.

• Add GET /v2/orgs/:spaceCatId/brands/:brandId/llmo/config endpoint that resolves brand URLs to SpaceCat sites and fetches each site's v1 LLMO config from S3
• Add PATCH /v2/orgs/:spaceCatId/brands/:brandId/llmo/config endpoint that validates site ownership against the brand, then delegates per-site config writes to the existing v1 updateLlmoConfig pipeline
• Extend stripMetadata in customer-config-v2-metadata.js to also strip enrichment/computed fields (brandId, brandName, category, topic, totalCategories, totalTopics, totalPrompts) so PATCH diff comparisons ignore GET-only fields
• Add OpenAPI spec for both new endpoints in customer-config-api.yaml
• Register routes and required capabilities (organization:read / organization:write)
• Add comprehensive unit tests for the new controller methods and the updated stripMetadata helper

Related Issues

Relates to

Testing the PR changes

1. Deploy to a dev environment or run locally with npm start.
2. Ensure a v2 customer config exists for a test organization with at least one brand containing URLs that map to SpaceCat sites.
3. Send GET /v2/orgs/{spaceCatId}/brands/{brandId}/llmo/config with valid IMS/API key credentials — verify it returns an array of { siteId, baseURL, config } objects.
4. Confirm that brand URLs which don't resolve to a site are silently skipped and logged as warnings.
5. Send PATCH /v2/orgs/{spaceCatId}/brands/{brandId}/llmo/config with a body like [{ "siteId": "<id>", "config": { ... } }] — verify per-site results with status: "success" and a version field.
6. Verify PATCH rejects sites that don't belong to the organization or brand (expect status: "error" in the results array).
7. Verify both endpoints return 403 for non-LLMO-administrator users.
8. Run unit tests: npm test — confirm all new tests in test/controllers/brands.test.js and test/support/customer-config-v2-metadata.test.js pass.

Screenshots/Videos

No screenshots available.

Additional Notes

N/A

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[github-actions]

This PR will trigger no release when merged.