One practical improvement for the collection: define a single `{{baseUrl}}` variable that includes scheme, host and API prefix, then use Postman’s Authorization tab for Basic Auth instead of `{{user}}:{{password}}@` in the URL. That makes 404s easier to isolate—if `/archive/media/...` fails, you can compare the prefix without changing credentials. For TODO requests, include the failing URL and status in the request description.