Add company permission check for `get_valuation_rate`

Validates that the user can access the company before returning valuation rate.