Merge-only bulk upsert of per-service session quotas and tag (e.g. region) quotas (1–500 rows).

Omitted services are unchanged. Within a row:

• complete_sessions_limit / forensics_sessions_limit: send both to set, both null to clear, or omit both to leave unchanged.
• tag_quota: an object replaces the stored tag quota (overrides included), null removes it, omitting it leaves it unchanged. Default limits of 0/0 block tag values without an override, so only the listed values are admitted. At most 500 overrides per tag quota and 500 per request. A tag-only row for a service/environment with no stored session quota also stores the account's default quota for new services.

Limits are validated: at least 1 Complete session, Complete at least 20% of Complete + Forensics (for tag values, whenever both are non-zero), and Complete + Forensics within the account's session capacity. Any invalid row or unknown service name returns 400 and applies nothing.

Auth: requires throttling:write (operator keys).