Intune device compliance drift

Write a PowerShell 7 script using Microsoft Graph (beta endpoint where needed, say where and why) that lists managed Windows devices in Intune that were compliant within the last 30 days but are non-compliant now, along with the compliance policy settings that are failing, the primary user, last check-in time, and whether the device has checked in within 7 days. Group results by failing setting so a technician can see the most common cause first. Support -ExportPath for CSV. Handle Graph paging and throttling (429 with Retry-After). Return only the script in one code block.