feat(entraid): add group overage check before the STS call

[Gearheads]

What this PR does / why we need it:
This change will update the entra-id protocol to check for group overage regardlless of how the role ARN was provided.

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes # This should now return the same error message when a user supplies the AWS IAM role ARN through the --role-arn flag, or when a user selects the AWS IAM role through prompts.

Testing

make ci and make lint completed successfully.

Example error message that the user will see:

fatal   failed executing root command
   {"error": "authenticating using provider entraid-oauth:
   assuming role with web identity: token has a groups overage:
   user is a member of too many groups for Entra ID to include a groups claim;
   use an app role or a different group instead of relying on the groups claim,
   or reduce the user's group membership count"}

This branch can be deleted once it is merged.