[Feature](costreport): Change policy for read access to cost report

[edda]

Description

Currently the cost report is visible to anyone with access to the project. Some customers don't want everybody with access to the project to be able to see this.

Problem Statement

Everybody with access to a project can see the cost report

Proposed Solution

Change the policy so that only users with one of the following roles can access: admin, resource_admin, resource_viewer

Alternatives Considered

Introduce a new role solely for access to the cost report. This was deemed too fine granular, as it was assumed that all admins would give themselves this role as well.

Additional Context

SCoCH ticket with orginial request