Copilot is rewriting what an enterprise identity even is. Every customer running M365 + Copilot + custom agents is now Microsoft's problem and their own — and the governance layer between them is the open question.