Fix: enforce report access checks on view and export

[Rom1-B]

Checklist before requesting a review

Please delete options that are not relevant.

• I have performed a self-review of my code.
• I have added tests (when available) that prove my fix is effective or that my feature works.
• I have updated the CHANGELOG with a short functional description of the fix or new feature.
• This change requires a documentation update.

Description

• It fixes #N/A
• Viewing or exporting a report now correctly checks the per-profile access rights and the report's enabled state instead of ignoring them.
• The report rights page now requires the right level that matches the write actions it performs.
• Dashboard and preference actions now check that the entry belongs to the current user before changing it, and a list size taken from the request is now safely converted to a number.
• A rendered value is now properly escaped, a redirect file name is sanitized, and CSV exports no longer corrupt cell content while guarding against a leading formula character.

Screenshots (if appropriate):