Set a setting value (writes audit log + invalidates cross-pod cache)
patch
/v1/admin/settings/{key}Body: `{ value: <typed> }`. The value is validated against the registry-declared type before persistence; mismatched shapes return 400.