Conditional Access baseline report

Write a PowerShell 7 script using Microsoft Graph that reads all Conditional Access policies in a tenant and evaluates them against this baseline: (1) MFA required for all users for all cloud apps, (2) legacy authentication blocked, (3) MFA required for admin roles, (4) sign-in risk high requires MFA or block, (5) device compliance required for Office 365 on unmanaged devices, (6) at least one break-glass account excluded from every policy. For each control output Pass/Fail/Partial with the policy names that satisfy it and a plain-English note a non-technical client could read. Report-only policies count as Partial. Output objects and also write a Markdown report to -OutFile. Return only the script in one code block.