The securities regulator said it would make a recommendation within 120 days on Coinbase’s rulemaking request, but says the action has “no merit.”