Function put_config 

pub fn put_config(
    patch: Json<Value>,
    actor: Actor,
    config_file: &State<ConfigFile>,
) -> Result<Json<ConfigDto>, Status>

Agent write path: deep-merge a partial config patch, persist it, and return the masked result. Token-gated via the Actor guard — rewriting the running configuration (dispatcher ports, queue/result sizes, asset dirs, the job stall threshold) is a consequential mutation, so it requires a valid X-Cortex-Token exactly like every other agent write (the human twin post_settings is AdminSession-gated). 401 without a token.