fix: ensure azexecutecommand is only set for intune admins

[ddlees]

Description

• Removes processing devices owners for AZExecuteCommand edge
• Adds tests

Motivation and Context

AZExecuteCommand should be processed for those with the Intune Admin role over a device, however, the current implementation includes device ownership for processing. As device ownership already has its own edge (AZOwns), this edge is duplicative and unnecessary.

How Has This Been Tested?

New tests for foundational units that aid in the processing of AZExecuteCommand. More unit tests to follow in separate PR.

Screenshots (if appropriate):

Types of changes

• Chore (a change that does not modify the application functionality)
• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

• Documentation updates are needed, and have been made accordingly.
• I have added and/or updated tests to cover my changes.
• All new and existing tests passed.
• My changes include a database migration.

[computator]

This all seems reasonable afaict. I had two questions about things, but if they aren't concerns then it seems ready to merge to me!