39265: Add API/gitops support for Microsoft Tenant IDs (#39631)

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #39265

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [x] Added/updated automated tests
- [x] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [x] QA'd all new/changed functionality manually

## New Fleet configuration settings

- [ ] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [x] Verified that the setting is exported via `fleetctl
generate-gitops`
- [x] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [x] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [x] Verified that any relevant UI is disabled when GitOps mode is
enabled

pkg/spec/testdata/controls.yml

@@ -27,6 +27,7 @@ ipados_updates:
 windows_enabled_and_configured: true
 windows_migration_enabled: false
 enable_turn_on_windows_mdm_manually: false
+windows_entra_tenant_ids: []
 windows_updates:
   deadline_days: null
   grace_period_days: null

pkg/spec/testdata/global_config_no_paths.yml

@@ -29,6 +29,7 @@ controls: # Controls added to "No team"
   windows_enabled_and_configured: true
   windows_migration_enabled: false
   enable_turn_on_windows_mdm_manually: false
+  windows_entra_tenant_ids: []
   windows_updates:
     deadline_days: null
     grace_period_days: null

pkg/spec/testdata/team_config_invalid_sha.yml

@@ -56,6 +56,7 @@ controls:
   windows_enabled_and_configured: true
   windows_migration_enabled: false
   enable_turn_on_windows_mdm_manually: false
+  windows_entra_tenant_ids: []
 software:
   app_store_apps:
     - app_store_id: "123456"

pkg/spec/testdata/team_config_no_paths.yml

@@ -63,6 +63,7 @@ controls:
   windows_enabled_and_configured: true
   windows_migration_enabled: false
   enable_turn_on_windows_mdm_manually: false
+  windows_entra_tenant_ids: []
 labels:
   - name: a
     description: A cool global label