Add compliance:reports:export to both viewer roles

[tylercloke]

     3 | viewer            | Viewer            | chef-managed | {compliance:reports:export,infra:infraServers:list,infra:infraServers:get,secrets:*:get,secrets:*:list,infra:nodes:get,infra:nodes:list,infra:nodeManagers:get,infra:nodeManagers:list,compliance:*:get,compliance:*:list,event:*:get,event:*:list,ingest:*:get,ingest:*:list,iam:projects:list,iam:projects:get,applications:*:get,applications:*:list}
     7 | compliance-viewer | Compliance Viewer | custom       | {compliance:reports:export,compliance:*:get,compliance:*:list}

[msorens]

Just need a carriage return at the end of the file.

[mjingle]

Good to go from docs perspective! Thanks!

[blakestier]

Ok so here's the problem: if compliance-viewer is not a chef-managed role, we should not be touching it after we've created it. We only created it conditionally on the role not already existing, so we're also potentially updating a role that a customer created but we didn't know about.

[susanev]

added do not merge, cause we are trying to figure out if we can change the action instead

[susanev]

fixed in #3623