Service principal and application user: Dataverse auth for Functions

The Azure Function that writes to Dataverse as the pipeline runs needs an identity. That identity has a name on each side - service principal in Azure AD, application user in Dataverse - and the link between them is where auth failures usua