“The impact on students in terms of erosion of privacy, the chilling effect that it can have, the potential to misidentify students and the way it gives a clear pathway from student behavior to discipline and punishment in the school-to-prison pipeline is too far a risk to take.”