Per-campaign access control

Restrict which team members can view, edit, or manage which campaigns — for orgs with multiple admins, multiple chapters, or multiple programs. Useful when your major gifts officer should only see major gift campaigns, your events team should only see gala campaigns, or your chapter directors should only see their own region's campaigns. Role-based access control at the campaign level, not just the org level.