workload-identity-federation-create-trust.md: roles allowed

[cnotin]

• "Application Owner" is not an Entra role (cf. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference), even though indeed the "owner" of an app is indeed authorized. So i've written it separately
• "Application Developer" role does not allow to update federated credentials (try: you'll get an access denied)
• on the contrary, "Global Admin", and "Hybrid Identity Administrator" allow it

[prmerger-automator]

@cnotin : Thanks for your contribution! The author(s) have been notified to review your proposed change.

[learn-build-service-prod]

Learn Build status updates of commit 109a559:

✅ Validation status: passed

File	Status	Preview URL	Details
docs/workload-id/workload-identity-federation-create-trust.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel

[learn-build-service-prod]

Learn Build status updates of commit 9da0c86:

✅ Validation status: passed

File	Status	Preview URL	Details
docs/workload-id/workload-identity-federation-create-trust.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel

[learn-build-service-prod]

Learn Build status updates of commit d9b1780:

✅ Validation status: passed

File	Status	Preview URL	Details
docs/workload-id/workload-identity-federation-create-trust.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel

[Court72]

@rwike77

Can you review the proposed changes?

Important: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team