Reporting access limited to selected forms

For GiveCampus accounts and administrator access.

Do not assign Reporting Admin expecting its school-level reports to respect selected-form scope: its school-level donation-report permission covers all forms and campaigns. Administrators can have selected object/group access, and form-level reporting has its own authorization, but a strict reporting-only selected-form role is not enforced by that preset. Review Roles → Permissions, remove broad reporting roles, and ask an authorized administrator/support to verify the permitted form-level access before inviting the user. Test both the intended form and school-wide reporting boundary.