Convert ADL ACLs to UC Grants (credential passthrough)

[nfx]

It is meant for customers who:

• Use Credential Passthrough with Adls Gen1 or Gen2
• Use a metastore that points to tables the rely on Credential Passthrough

The command is expected to be run with a user that can access the Azure AD Graph API, and the ADLS or ABFS APIs. Perform inventory of azure storage account ACL defined for passthrough clusters and prepare inventory. Extend the save_azure_storage_accounts cli cmd to include the output of this inventory

This may be necessary to run from account-admin perspective as well

Upstream dependencies:

• Add databricks labs ucx migrate-tables and a related workflow #670

[pohlposition]

When we were moving to TACL from pass-through for DBSQL, Shant created some code to do this:
go/aclsbootstrap

[nfx]

@pohlposition do we want to put links to internal repos here? 😉

[pohlposition]

Changed to go link