Update scanner settings

Update scanner settings for a scope. Only provided fields are changed; omitted fields keep their current values. Scopes: pass only organizationId to set org-wide defaults, add repositoryId for repo-specific overrides, add partitionPath for monorepo app overrides. Settings that can be configured include: prEnabled (PR scanning), fullScanCronExpression (scan frequency), scanModules (SAST/SCA/Secrets/IAC/EOL toggles), confidenceThreshold, autoPatchEnabled, highPerformanceMode, fileIgnorePatterns, and releaseTrack (EDGE). On on-premises instances, any request containing allowDeepSeekModels returns HTTP 400 because model selection is controlled by the deployment administrator.