Try AP-bridge on the headquarter and station-bridge on all the other ones. For example, if you will have static ip-address and the HQ has access to the net through ether1, the configuration, after you have removed all the existing settings, should be as follows:
HQ
/interface wireless
set 0 band=5ghz-a/n channel-width=20/40mhz-XX disabled=no mode=ap-bridge ssid=Shrek3
/interface wireless security-profiles
set 0 authentication-types=wpa2-psk mode=dynamic-keys wpa2-pre-shared-key=YourPassword
/ip address
add address=10.10.10.51/24 interface=wlan2
/ip dhcp-client
add disabled=no interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
Shops/Storage
/interface bridge
add name=bridge
/interface wireless
set 0 band=5ghz-a/n channel-width=20/40mhz-XX disabled=no mode=station-bridge ssid=Shrek3
/interface wireless security-profiles
set 0 authentication-types=wpa2-psk mode=dynamic-keys wpa2-pre-shared-key=YourPassword
/ip address
add address=10.10.10.X/24 interface=bridge
/ip route
add gateway=10.10.10.51
/interface bridge port
add bridge=bridge interface=all
This should be the bare minimum for the network to function
After adding all bridge ports you will have a disconnect. Replace
X in the shops/storages ip-address with the intended one.