Execute a user transfer using mappings from a scan
Apply the assignments returned by /scan or /scan-bulk. The supplied scanVersion must still match the live state — a stale scan returns 400 and the caller must re-scan. Optionally deletes the source department after a successful bulk move. Returns 202 with a transferId for status polling.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
Token from the prior scan; rejected if stale to prevent applying an out-of-date plan.
Per-user transfer plan: source userId -> target department / new role / re-assignee.
When set, the source department is deleted after the transfer succeeds (must be empty).