Campaign reporting-only access and gift notifications

For GiveCampus accounts and administrator access.

Grant the reporting role with access limited to the intended campaign/object group, then select that administrator in the campaign's gift-notification recipients. Notification enrollment and edit permission are separate. The notification recipients combine campaign selections and school-wide subscribers, and must resolve to confirmed, non-guest accounts. Avoid school-wide gift subscriptions when campaign-only mail is intended. Some detailed donor fields have separate permission checks.