Fix Payment Reconcile Error

Prevents non-managers from bypassing the expense report approval workflow by directly changing its status (module name references payment reconciliation, but the code only touches expense-report approval — worth a review).