Get the storage compliance report of a role

Returns the stored configurations of the role that its storage allowlist rejects: the entity, the field the value was read from and the rule that rejected it. The report is computed on demand. Enabling resource_isolation validates the role alone and leaves the stored configurations untouched, so call this endpoint before enabling it to see what the allowlist would reject: narrowing an allowlist applies to the next save of each resource. The report also carries the posture findings, which describe how wide the isolation is rather than what is wrong with it, and are computed while the role isolates. The report requires the "*" permission: its findings name administrators and resources of every role.