Update allowlisted metadata on up to 500 content items in one transaction.

updates.externalId relabels an item (set-only; it must be unique among the org's live items). An item whose new externalId is already taken gets status: "conflict" with an error and none of its updates applied; the other items still commit. Items are processed in request order, so a later item claiming a value an earlier item just took also conflicts.