Remove the second SHALL in MS.DEFENDER.4.1v1

[buidav]

💡 Summary

A custom policy SHALL be configured to protect PII and sensitive information, as defined by the agency. At a minimum, credit card numbers, U.S. Individual Taxpayer Identification Numbers (ITIN), and U.S. Social Security numbers (SSN) SHALL be blocked.

Example rewording.
`A custom policy SHALL be configured to protect PII and sensitive information, as defined by the agency, blocking at a minimum: credit card numbers, U.S. Individual Taxpayer Identification Numbers (ITIN), and U.S. Social Security numbers (SSN).

Motivation and context

The limit policies to a single RFC keyword.

Implementation notes

• Change the baseline text.
• Update the version number MS.DEFENDER.4.1v1 => MS.DEFENDER.4.1v2
• Update rego?

Acceptance criteria

• Language is updated in the baseline
• Version of the policy is bumped
• Code changes for the new policy version (if necessary).