ACL change Propagation on Large Repositories

We have problems when updating an ACL for a document on a large repository as the scheduled FindReadAclsWork work can:

potentially match the entire repository and takes hours to complete, this is going to block other Works in the common queue.

fail during scroll because of MongoDBSocketTimeout or because the leader has changed which interrupts the query with a MongoQueryException. In this case, the retry will start the process again submitting duplicate UpdateReadAclsWork.

We want to replace the existing FindReadAclsWork/UpdateReadAclsWork works with a new bulk action.