put
https://api.qfp.quantnetwork.net/api/tenants//groups/
Updates the name and description. The key is not part of the request:
it is immutable, so policies referencing it never silently re-point.
Requires the group:manage permission, and the path tenant must equal
the caller's tenant_id claim. A deactivated group cannot be edited.