Patch Agent Mcp Connection

Partial-update one external MCP connection by name.

name is URL-encoded by the FE so quirks like spaces survive. Switching authMode mid-patch swaps the discriminated-union variant; the merged row re-validates fully so the FE can't end up with an "unknown" auth mode mid-flight.