Create sanctions

Requires permission: SanctionsAccess

Creates one or more sanctions and returns their new ids; may also trigger notification emails.