Get a board report

Only GET is served on this path, and that is the whole of it.

There is no update-report operation here under any verb: a board report's mutations are the /submit, /approve and /reject sub-routes. Deletion is implemented in the handler and deliberately not registered — whether an RBI FREE-AI board report may be destroyed over the API is a retention decision, tracked separately.