Dozens of journalists and activists in El Salvador have had their phones hacked with the spyware Pegasus, which has been used by governments to monitor critics and dissidents, a report says.