[afoote-mitre]

Summary

• Add a generated Postman collection covering every documented POST /search field, representative filter combinations, deterministic validation failures, and optional manual fault-injection checks.
• Add local and dev Postman environments plus instructions for importing, running, maintaining, and recalibrating fixture-based checks.
• Return status: "ok" consistently from successful semantic post-filter searches so CVSS, SSVC, KEV date, cpeName, and virtualMatchString responses match the standard search response shape.
• Link the manual Postman suite from the repository README.

Why These Changes Are Needed

Semantic post-filter searches returned pagination and hit data but omitted the top-level success status produced by ordinary searches. This caused response-contract checks to fail even when the requested filter returned the correct CVE records.

The API also lacked a maintainable manual test collection covering its complete search contract. The builder now checks that every documented SearchRequest property has positive Postman coverage and generates portable local/dev artifacts from one source file.

Primary Files

• controllers/searchController.js: adds the missing success status to optimized post-filter responses.
• controllers/searchController.test.js: locks the consistent response shape across semantic filter paths.
• test/postman/buildCollection.js: defines and generates the complete manual contract suite.
• test/postman/CVE-Search-API.postman_collection.json: importable generated collection.
• test/postman/local.postman_environment.json: localhost configuration.
• test/postman/dev.postman_environment.json: deployed dev configuration.
• test/postman/README.md: usage, fixture, maintenance, and fault-injection guidance.
• README.md: links to the Postman documentation.