Update plugin, acknowledging a changed privacy disclosure

Same as GET, with a body. When the block the upgrade would land differs materially from the accepted one (see GET /api/plugin/{RepoName}/privacy) the upgrade is refused unless privacyAccepted matches that pending block; on success the block is recorded as accepted.