Updates a candidate list's title, description and/or owner. At least one field must be provided; pass description: null to clear it. externalId is immutable and cannot be changed after creation. Pass owner (an email) to hand the list to another user of the organization; an unknown email or one outside the organization returns 400. Returns 404 when the list is not found in the caller's organization.