Register Clauditor Anthropic and OpenAI audience URIs

[jwmossmoz]

The Anthropic and OpenAI Clauditor applications existed, but they had no application ID URIs. Token requests for their expected api://<client-id> audiences failed with AADSTS500011 because Entra could not find the resource principals.

Register an identifier URI for each application. This lets callers request tokens for separate Anthropic and OpenAI audiences.

Validation:

• The saved azure_ad plan contained two in-place application updates, with no creates or destroys.
• Applied the saved plan successfully: 0 added, 2 changed, 0 destroyed.
• Live Entra reads show both identifier URIs.
• Token requests now resolve both resource principals and reach the Azure CLI consent check instead of returning AADSTS500011.
• A fresh azure_ad plan reported no changes with -detailed-exitcode exit code 0.
• Terraform validation and repository pre-commit checks passed.

Tracking: RELOPS-2567