Feature: Entra Cloud Kerberos Trust (Cloud TGT)

### Is there an existing request for this feature?

- [x] I have searched the existing issues and found none that matched mine

### Describe the feature

Can authd make use of Entra ID Cloud Kerberos Trust for authentication with AD connected resources?

This is available with Windows Hello for Business and macOS platformSSO.

MacOS guide: https://learn.microsoft.com/en-us/entra/identity/devices/device-join-macos-platform-single-sign-on-kerberos-configuration

### Describe the ideal solution

_No response_

### Alternatives and current workarounds

_No response_

Start by reading the authd authentication entry points and the linked Microsoft guide for macOS Platform SSO Kerberos configuration. Define the required Cloud Kerberos Trust behavior for Entra ID and AD-connected resources, then confirm the implementation and validation scope with maintainers.

Written by the indexing model from the issue text.