Bugfix/issue 1194: fix issues related to test 21835

[sandeepjha000]

• Align pass/fail thresholds with spec: <2 Fail, ==2 Pass, >2 Investigate (via -CustomStatus Investigate, matching Test-Assessment-21816).
• Update Pass/Fail messages to spec wording; Investigate message focuses on break-glass scope.
• Use splatting for Add-ZtTestResultDetail to conditionally include CustomStatus.
• Precompute $userRoleTemplateIds to drop the O(n·m) Where-Object role lookup per CA policy.
• Short-circuit per-user CA evaluation when there are zero enabled CA policies.
• Use transitiveMemberOf/microsoft.graph.directoryRole so role-assignable group memberships are included.
• Sort the permanent GA table on underlying booleans instead of emoji glyphs.
• Deduplicate authentication methods in the Emergency access accounts table.