Added permission checks on `get_account_balances_coa`

Adds missing permission enforcement to Chart of Accounts balance endpoint.