Migrate AAD functionality to use Microsoft Graph

The Azure Graph is now deprecated and whilst Azure PowerShell and the azure-cli still use this for their AAD-related functionality, we have some AAD features that use both.

This makes the pipeline security configuration more complex as the service principals that execute the pipelines require both Azure Graph and Microsoft Graph API permissions.

Ideally, this work would be aligned with when the above MS tooling is updated, but roadmap information needs to be determined.

```[tasklist]
### Tasks
- [ ] https://github.com/corvus-dotnet/Corvus.Deployment/issues/82
- [ ] https://github.com/corvus-dotnet/Corvus.Deployment/issues/83
- [x] Assert-AzureAdAppRole
- [x] Assert-AzureAdGroupMembership
- [x] Assert-AzureAdSecurityGroup
- [x] Assert-AzureServicePrincipalForRbac
- [ ] Assert-AzureAdApiPermissions
```