Replaces the whole custom_attribute_values map, validated against the custom attribute definitions of the device's model: an unknown key, or a value that does not match its definition type, returns 422. Only the incoming write is validated — values already stored are never re-validated retroactively. A null or "" value clears the field. These values are deliberately not accepted by Device update, which validates against the device schema instead.