Update IdentityCore dependency for mobile onboarding replay state

[Copilot]

This picks up the CommonCore change that moves the mobile onboarding signal from transient embedded-webview state onto request parameters and carries it through SSO extension / broker replay. The goal is to preserve msauth://enroll state across the non-brokered → brokered process switch.

• Dependency update

  • Advance the MSAL/IdentityCore submodule to the CommonCore revision that persists the mobile onboarding flag on interactive request parameters and serializes it into the broker/SSO replay payload.

• Replay-state propagation

  • The request-scoped onboarding signal now survives handoff from the host-app embedded webview flow to the replayed broker/SSO extension request.
  • This aligns replay behavior with the existing request-parameter pattern used for other cross-process interactive state.

• MSAL surface impact

  • No public MSAL API changes.
  • No new configuration or identifiers.
  • Behavior change is limited to preserving request state during interactive replay.

• Dependency assumption

  • This PR depends on the paired CommonCore implementation for:
    • setting the flag when msauth://enroll is observed
    • serializing it into the broker/SSO request
    • hydrating it back onto the replayed request parameters

Example of the intended cross-process contract:

// Host-app process
requestParameters.isNewMobileOnboardingFlow = YES;

// Broker / SSO replay payload
authorizationParameters[@"new_mobile_onboarding_flow"] = @"1";