Add risky applications and service principals to the HTML report

[mitchelbaker-cisa]

💡 Summary

As a follow up to the work done in #1327, add risky applications and service principals into the HTML report.

Motivation and context

Related to #1073

Implementation notes

Please provide details for implementation, such as:

• an example for how this would be used
• what this would look like
• how this would act
• any related work, including links to related issues

Acceptance criteria

How do we know when this work is done?

• Criterion