Comprehensive Azure/Entra ID role and permission discovery — finds everything including inherited and PIM-eligible roles that basic queries miss.