Retrieves the aggregated retailers linked to a multi-retailer group principal.
The target is resolved by the caller's own retailerId — never an open query —
so a caller can only inspect a principal that lives in its own retailer.
Returns 403 when the target exists but has no groupId (not a group principal).