Patch Agent Http Connection

Partial-update one HTTP connection by id.

Per-header masked sentinel preserves the existing encrypted Binary; a new header value encrypts + replaces. Removing a key from the headers dict in the patch removes it from storage (the merge is field-level, not a deep merge of the headers object).