Update a carrier
Update a carrier. Only provided fields will be updated. Admin-only — matches the authorization model of the dedicated /disable + /enable + /restrict + /unrestrict endpoints. ``is_active`` is explicitly rejected: flips must go through POST /disable or /enable so every state change carries a reason and an audit row.
**Authentication:** Bearer token required.

