Import employers from a CSV file.
RequirePermission is retained for API documentation consistency but is not enforced here
because [SkipEmployerCheck] bypasses EmployerItemFilter permission checks; authorization
is enforced explicitly below via IsAllowedToCreateEmployer().