Preserve Clauditor GCP identity and clear Azure storage plan drift

[jwmossmoz]

PR #333 changed the Clauditor Terraform key from audience to gcp-aud. Without state moves, Terraform deleted the original application and service principal, then failed to create a replacement with the original application ID URI.

Add moved blocks for the application, service principal, and Contributor role assignment. These preserve the original GCP client ID, audience URI, and role assignment when the key changes. Also correct the GCP application name in the comment.

The hardwareimaging storage account also showed the same network rules change after each apply. Remove its redundant default network rules block. AzureRM 4.60.0 omits these defaults from state, which caused the repeated difference. The account continues to use Allow with the AzureServices bypass.

Validation:

• Restored the original application and service principal and imported them at the gcp-aud addresses in the shared state.
• Completed the recovery applies. The GCP role assignment moved without an Azure resource change.
• Fresh full plans for azure_ad, azure_fuzzing, and azure_fxci all reported no changes with -detailed-exitcode exit code 0.
• Repository pre-commit checks passed for all three changed files.