[PM-1270] Throw error when removing master password reset policy with TDE enabled

[r-tome]

Type of change

- [ ] Bug fix
- [X] New feature development
- [ ] Tech debt (refactoring, code cleanup, dependency upgrades, etc)
- [ ] Build/deploy pipeline (DevOps)
- [ ] Other

Objective

If an organization has “trusted device” as their decyption method for SSO, show an error message if an admin tries to turn off the master password reset policy or tries to remove auto-enrollment.

Code changes

• src/Core/Services/Implementations/PolicyService.cs: If the saved policy is of the "Master Password" type, we verify if TDE is activated for that organization and generate an error if it is the case.
• test/Core.Test/Services/PolicyServiceTests.cs: Unit tests to verify the implementation

Before you submit

• Please check for formatting errors (dotnet format --verify-no-changes) (required)
• If making database changes - make sure you also update Entity Framework queries and/or migrations
• Please add unit tests where it makes sense to do so (encouraged but not required)
• If this change requires a documentation update - notify the documentation team
• If this change has particular deployment requirements - notify the DevOps team

[eliykat]

(Looks good otherwise)

[eliykat]

Thanks for adding tests!