Validate report file types client-side before uploading