Add Dialogs to ESC1

[jakehildreth]

This PR adds a couple questions to Modes 1, 3 and 4 when an ESC1 is identified:

1. Does [Security Principal] need to Enroll in the [Template Name] template? [y/n/unsure]

• If 'n', provide guidance on using GUI to remove Enroll/Autoenroll rights.
• If 'y' or 'unsure', ask next question.

2. Is the [Template Name] certificate frequently requested? [y/n/unsure]

• If 'n', provide code for enabling Manager Approval.
• If 'y', report that Locksmith is unsure of the best option and provide 3 options.

This should resolve #151. I decided ESC2s and ESC3s should always require Manager Approval.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
⚠️ COPYPASTE	jscpd	yes		21	2.02s
⚠️ EDITORCONFIG	editorconfig-checker	6		1	0.25s
⚠️ MARKDOWN	markdownlint	1		11	0.73s
⚠️ MARKDOWN	markdown-link-check	1		8	2.85s
✅ MARKDOWN	markdown-table-formatter	1		0	0.76s
⚠️ POWERSHELL	powershell	5		4	10.29s
✅ POWERSHELL	powershell_formatter	5		0	7.15s
⚠️ REPOSITORY	checkov	yes		1	14.07s
✅ REPOSITORY	gitleaks	yes		no	0.9s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	19.99s
✅ REPOSITORY	secretlint	yes		no	0.88s
✅ REPOSITORY	trivy	yes		no	5.66s
✅ REPOSITORY	trivy-sbom	yes		no	1.77s
✅ REPOSITORY	trufflehog	yes		no	7.03s
⚠️ SPELL	cspell	7		177	6.22s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by

[SamErde]

The strict no-indent on here-strings makes it hard to keep track of which closing brace corresponds with which block. # end if ___ tags might be helpful for these two closing braces. But that's purely for code review and wouldn't make any functional difference.

[SamErde]

This is plural now?

[SamErde]

Haven't tested, but I feel like you need to capture the updated remediation in $Issue before continuing to return $Issue at the end of the function. (And I could be totally wrong.) Should this be something like:

if ( $Mode -in @(1, 3, 4) ) {
    $Issue = Update-ESC1Remediation -Issue $Issue
}

$Issue

[SamErde]

Approved with one question to catch me up and help me understand. :)