Patch input for the web.embedding section. Omitted fields are left unchanged. Pass an empty list to allowedOrigins to disable embed sign-in entirely.