Deactivate up to the bulk-endpoint cap of users in a single request. Pass an array of user ids in data; each id is processed independently and the response reports per-row success or failure. Equivalent to calling POST /v3/users/{id}/deactivate for each id but submitted as one request — use for HRIS-driven termination waves.