Update Dataset Sample Settings

Turn the sample catalog on/off per (dataset, cut) for ALL clients.

Off hides the cut's sample in the SQL Editor and API for every client; live/bulk access is unchanged. Absent ⇒ enabled. Each changed cut fans out a per-cut grant/revoke across providers (only when the value actually changed, so a no-op save is cheap).