Audit and consolidate service principals/service connections for ADO

We have a number of service connections that are defined in Azure DevOps which point to different service principals in AAD. We need to do an audit of all of our service connections and their associated AAD service principals to make sure that each AAD service principal has one of our groups assigned as an owner so that we can do credential rotation when necessary.

Finally there may be an opportunity to consolidate some of the service principals/connections so that we aren't chasing quite so many secrets to rotate.

The issue names Azure DevOps service connections and AAD service principals but does not identify repository files, tests, or entry points. Start by inventorying every connection and its associated principal, then verify that each principal has an owning group and document any safe consolidation opportunities; done means ownership and rotation coverage are complete.

Written by the indexing model from the issue text.