🔐 Granular site access for Microsoft service principals

• Service principals can now be restricted to specific sites only • No longer requires Sites.Read.All permission for limited access scenarios • Provides more fine-grained control over Microsoft connector permissions