Integrate with Microsoft Entra ID to block non-SI creds

[justinpac]

Today we let anyone with a Microsoft email login, but we will use the catalog database to enforce permissions for each user. In the future let's block anyone without SI credentials from logging into the application. We can do this via the Azure portal, but more thinking is required to understand how we should manage user identities and coordinate with the existing SI authentication system.