Partially updates the organization's own LLM provider. Every field is optional, including credential: omit it and the stored one is used. Validation runs against the merged result. Gateway validation only runs when connection details, models, or enabled state require it.