refactor(tui): reorder main menu into logical groups

Menu had grown by prepending each new feature to the top, so items
had no relation to their neighbors. Grouped into Export/Import, Bulk
operations, Baselines & compliance, Reporting, Tenant & auth admin,
with Exit last. Item numbers (used for dispatch) unchanged, only
display order moved.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Start-IntuneToolkit.ps1

@@ -308,27 +308,32 @@ $commonParams = @{
 }
 
 $menuItems = @(
-    "21. Bulk delete policies"
-    "20. Export Entra role membership"
-    "19. Document Conditional Access policies"
-    "18. Rotate app secret"
-    "17. Deploy CIS M365 baseline"
-    "16. Generate reports"
-    "15. Delete tenant auth and app registration"
-    "14. Delete local tenant auth only"
-    "13. Refresh tenant names"
-    "12. Initialize auth (one-time setup)"
-    "11. Deploy baseline (dry-run / WhatIf)"
-    "10. Deploy baseline"
-    "9.  Bulk device operations"
-    "8.  Bulk rename policies"
-    "7.  Export assignments to CSV/Markdown"
-    "6.  Restore assignments"
-    "5.  Backup assignments"
-    "4.  Bulk assignment manager (policies)"
-    "3.  Bulk app assignment"
-    "2.  Import policies"
+    # Export / Import
     "1.  Export policies"
+    "2.  Import policies"
+    "7.  Export assignments to CSV/Markdown"
+    "5.  Backup assignments"
+    "6.  Restore assignments"
+    # Bulk operations
+    "3.  Bulk app assignment"
+    "4.  Bulk assignment manager (policies)"
+    "8.  Bulk rename policies"
+    "21. Bulk delete policies"
+    "9.  Bulk device operations"
+    # Baselines & compliance
+    "10. Deploy baseline"
+    "11. Deploy baseline (dry-run / WhatIf)"
+    "17. Deploy CIS M365 baseline"
+    "19. Document Conditional Access policies"
+    # Reporting
+    "16. Generate reports"
+    "20. Export Entra role membership"
+    # Tenant & auth admin
+    "12. Initialize auth (one-time setup)"
+    "13. Refresh tenant names"
+    "18. Rotate app secret"
+    "14. Delete local tenant auth only"
+    "15. Delete tenant auth and app registration"
     "0.  Exit"
 )