Vikunja fixture: the create verb is PUT, not POST (R-462)

Test code only. Vikunja creates a project with PUT /api/v1/projects; the fixture sent POST, which
answers 405 Method Not Allowed and reads like a broken app rather than a wrong verb. Corrected
box-side first, where the edge then walked clean (vikunja 2.3.0 -> 2.6.0, proven, 24.6 s); this is
the same correction in the ported copy.

Gates: catalog_gates.py --fast — all four OK.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

scripts/upgrade_fixtures.py

@@ -457,9 +457,11 @@ class Vikunja:
             say("    vikunja: could not log in after registering")
             return None
         title = "spike-" + secrets.token_hex(5)
+        # Vikunja CREATES with PUT, not POST — a POST answers `405 Method Not Allowed`, which
+        # reads like a broken fixture and is really the wrong verb. Measured 2026-09-21.
         rc, code, out = _curl(base + "/api/v1/projects", "-H", f"Authorization: Bearer {tok}",
                               "-H", "Content-Type: application/json",
-                              data=json.dumps({"title": title}), method="POST")
+                              data=json.dumps({"title": title}), method="PUT")
         say(f"    vikunja: create project http={code}")
         if code not in ("200", "201"):
             say(f"    vikunja: project refused {out[:200]}")