Updates the lifecycle status of a product variant by its UUID. The variant is
first fetched to verify existence and read access, then write access to the
variant's merchant is verified. The provided status value is validated against
the known enumeration before being persisted.