Add AUTH_MICROSOFT_TENANT env var to allow configuring the Azure AD tenant for single-tenant Entra ID applications, which cannot use the default /common endpoint. Depends on go-pkgz/auth#266 Closes #1998