feat(federation): relay FM's 501 for a partner secret it can't store

FM answers 501 when it has no key to store a typed our_client_secret. Allow it
on register and update, and document our_client_secret_set on Partner.