Validate group_by args before saving report

Validates `group_by` arguments against a strict whitelist before persisting report definitions.