fix: remove AZURE_CLIENT_ID and AZURE_TENANT_ID from HighRiskEnvKeys

These are public identifiers, not secrets. AZURE_CLIENT_SECRET remains.
Reporting non-secret IDs at HIGH severity produces false positives for
any user running az login interactively.

Author: Pringled

internal/scan/apikeys.go

@@ -44,8 +44,6 @@ var HighRiskEnvKeys = map[string]bool{
 	"AWS_SESSION_TOKEN":              true,
 	"GOOGLE_APPLICATION_CREDENTIALS": true,
 	"AZURE_CLIENT_SECRET":            true,
-	"AZURE_CLIENT_ID":                true,
-	"AZURE_TENANT_ID":                true,
 
 	// Secrets managers (key to all other secrets)
 	"VAULT_TOKEN":              true, // HashiCorp Vault — grants access to all managed secrets