Restrict Failed Background Check Status to CELTS Admins

Issue Description: In Student Search → User Profile → Background Check, Student Staff and Operations Team members can currently interact with a student's background check status. However, the Failed status should be restricted because only CELTS Admins should be able to determine and record that a student failed a background check.

Student Staff and Operations Team members should only be able to view and select the Submitted and Passed statuses. The Failed option should not be available for them to select.

Expected Behavior: Student Staff and Operations Team members can update a student's background check status only to Submitted or Passed while can only view Submitted. Only CELTS Admins can view/select the Failed status and record a failed background check for a student.

UI:

Table of access:

Start at Student Search → User Profile → Background Check and trace how background-check statuses and user roles are handled. Compare Student Staff, Operations Team, and CELTS Admin behavior with the access table and verify that each role can view or select only its permitted statuses; confirm the result in the UI.

Written by the indexing model from the issue text.