Update or rotate a document-fetch credential. Send only the fields you are changing (for example { "token": "..." } to rotate the key). The token is write-only and never returned. A credential in another organization group returns 404. Authenticated with your API key alone.