Grants an existing user access to one or more merchants. This creates membership records (pivot rows) without creating a new user or modifying the user's identity fields. Each merchant in the request is authorized individually — the caller must be an active admin of every merchant being granted, or a system_admin. If any merchant is unauthorized, the entire request is rejected with no partial application.