Grant access to a consumer

Grants every listed API proxy / API proxy group of the project (accessList, each with name, type API_PROXY or API_PROXY_GROUP and an optional expireTime; optionally environments [{environmentName, enabled}], disallowedEndpoints [{name, httpMethod}] on an API proxy and disallowedApiProxies [name] on a group — all by name, an unknown one is 404). An unknown target is 404; a target already granted is 409 lifecycleConflict (reason accessAlreadyGranted) — nothing is silently skipped. Targets are applied in order: a refusal leaves the targets before it granted, so a retry should send only the remaining ones.