Perform a partial update of a user using SCIM PATCH operations.
Supports operations like updating user roles (entitlements), active status, and other attributes.

Common use cases:

• Update user role by patching entitlements
• Deactivate a user (clears vendorid and role in metadata)
• Reactivate a user (restores vendorid from organization data)