Add Entitlement Management tests MT.1107-MT.1111

[nicowyss]

Summary

Adds 5 new Maester Core Tests for Entra ID Identity Governance Access Packages.

Tests Added

• MT.1107 – Access packages and catalogs should not reference deleted groups
• MT.1108 – Access packages should not reference inactive or orphaned assignment policies
• MT.1109 – Access package approval workflows must have valid approvers
• MT.1110 – No catalog should contain resources without any associated access packages
• MT.1111 – Catalog resources must have valid roles (no stale app roles or SPNs)

Notes

• Read-only tests
• Tested with Invoke-Maester
• No tenant modifications