Adjusts Entra ID Device Code Authentication from Unusual Principal to reduce some false-positives identiied from recent hunts. Changes to other docs are observed in the diff due to drift between query TOML docs and MD docs.