Adds multiple blocked spam sources in a single request, typically used to sync the blocklist from an external security tool. Each item in data is validated and persisted independently — per-item failures are reported in the response without aborting the rest of the batch.