Cloud WAF blocks the admin API path only after a new JSON field increases rule score above threshold

The endpoint worked before, but the updated payload shape now trips a scoring-based rule model that was previously below the block threshold.