Updates a candidate list's title, description and/or externalId. At least one field must be provided; pass description: null or externalId: null to clear them. externalId must be unique within the organization. Returns 404 when the list is not found in the caller's organization.