Document OpenBao Browser CLI limits

docs/whynot-design-npm-publish-handoff.md

@@ -126,8 +126,17 @@ JSON
 bao write auth/netkingdom/role/whynot-design-workload-kv-read @"$role_payload_file"
 ```
 
-The OpenBao Web UI console may treat `bound_claims={...}` as a string. Use a
-raw JSON/API role editor when staying in the UI, or use the shell form above.
+The OpenBao Browser CLI cannot run this shell block and may treat
+`bound_claims={...}` as a string. When staying in the Web UI, open the API
+Explorer and submit the role payload JSON above with:
+
+```text
+method: PUT
+path: /v1/auth/netkingdom/role/whynot-design-workload-kv-read
+```
+
+If the API Explorer asks for a path without the API prefix, use
+`auth/netkingdom/role/whynot-design-workload-kv-read`.
 
 ## Non-Secret Reads