Update an existing attribute rating in place. Only candidate_attribute_rating and note can be changed; the scorecard_id / job_candidate_attribute_id linkage is immutable and sending either is rejected as a disallowed property. The underlying scorecard must still be editable — submitted scorecards reject attribute-rating updates.