Candidate validity and reports

Use the server-authorized candidate picker above. Validity uses the shared candidate store; access enforcement remains off pending policy approval. No report email is sent from this view.