[KeyVault] Support for making purge protection on/off as a one time only operation

[dingmeng-xue]

Description of the new feature

• Enable purge protection on an existing vault ([KeyVault] enable soft-del/purge-prot as one-time operation #11530)
• Update purge protection retention days

Proposed implementation details (optional)