Part of #35, builds on the auth layer from #36. POST to /metadata/{identifier} with -target and -patch form fields, where the patch is RFC 6902 JSON Patch. Auth is the S3 keys as access/secret form fields. Plan: typed patch operations (add/replace/remove with string or string-array values) so callers don't hand-build JSON.
Part of #35, builds on the auth layer from #36. POST to
/metadata/{identifier}with-targetand-patchform fields, where the patch is RFC 6902 JSON Patch. Auth is the S3 keys asaccess/secretform fields. Plan: typed patch operations (add/replace/remove with string or string-array values) so callers don't hand-build JSON.