Restrict CO Person Role in child COU to only those with role in parent COU

This is a feature request to add functionality so that a CO Person record can only have a CO Person Role in a child COU if the CO Person record already has a CO Person Role in the corresponding parent COU.

Requested by BNL via CIlogon.