Document OpenBao Browser CLI limits

scripts/credential-change.py

@@ -388,6 +388,8 @@ def render_operator_commands(ccr: dict[str, Any]) -> str:
     lines = [
         f"# Operator handoff for {ccr['id']}: {ccr['title']}",
         "# Run from the railiance-platform repo with an approved OpenBao operator token.",
+        "# Do not paste this shell block into the OpenBao Browser CLI.",
+        f"# Web UI API Explorer path for the role JSON body: /v1/{auth_path}",
         "set -euo pipefail",
         f"bao policy write {shlex.quote(openbao['policy_name'])} {shlex.quote(openbao['policy_file'])}",
         'role_payload_file="$(mktemp)"',