Fix report endpoints to be async for compatibility with permission decorator

Register reports router, fix CSV BaseModel import, enforce report permissions, and add frontend API docs.

feat: reporting with advanced filtering, pagination, and performance optimizations.

Iniital Commit