App Protection Policies

Replace Require Approved Client App with the App Protection Policy Grant

Policies using the retired approved client app grant are now read-only. Find them, build replacements that require an app protection policy, test in report-only and cut over.