Patient config

Config writes addressed by a list of patient ids, for the case the per-trigger and bulk-update routes do not cover: the caller holds the ids and wants one push. Reads are POSTs here too — a thousand ids do not fit in a query string.