Set Workspace Provider Key Override

Tri-state: an omitted field leaves that flag unchanged.

Both fields false, whether that is the merged result or a value sent explicitly, is a no-op the service deletes rather than stores: absence of a row already means full inheritance from the organization default. Setting one true auto-resolves the other when they would otherwise conflict (pinning re-enables a disabled key; disabling un-pins a pinned one); sending both true explicitly is refused.

The effective view for one workspace+key: raw override flags plus the resolution.