get
https://api.controlup.com/daas-iq/v1/cloud/tenants//discover/subscriptions
Discovers the subscriptions the tenant's default credential can reach — for Azure, those the service principal was granted.
Each row is flagged with isAlreadyManaged, so this distinguishes what could still be onboarded from what
already has been. Exercises only the default credential.
