Update Adapter

Update hosted adapter configuration including price, pricing scheme, trial budget, and limits.

SWEEP FIX: every path alias — including the bare, unprefixed /adapters/{id} — now requires a verified producer token that owns the adapter's org. The bare alias used to pass auth_required=False (a path-based carve-out with no documented rationale), so an anonymous caller who enumerated adapter_id off the fully public GET /v1/discovery listing could rewrite upstream_url (redirecting live trial/consumer traffic to an attacker-controlled host), flip is_active, or alter pricing/commission for ANY adapter with zero authentication. There is no legitimate anonymous caller of this route.