Update allowed collections for Firestore access.

This allows updating the collection-level restrictions without re-uploading the service account credentials.

Payload: { "allowed_collections": ["users", "orders"] # Array of collection paths, or null for all }

Set allowed_collections to null to allow access to all collections. Supports wildcards like "users/*/orders" for subcollections.