Move `fundCode` metadata to a storage table instead of blob metadata

[SvenAelterman]

Issue

Anyone with write permission on the blob can modify or delete the fundCode metadata key/value.

There is no RBAC permission to separately control access to blob metadata.

Proposed Design

Each storage account managed by SaaS gets a table with a well-known name (TBD).

The identity executing the app needs permissions on storage accounts to create tables and read tables.

Table keys:

• Partition key: container name
• Row key: metadata key value