Fix AzureBlobStorage copy

[SmitaRKulkarni]

Changelog category (leave one):

• Bug Fix (user-visible misbehavior in an official stable release)

Changelog entry (a user-readable short description of the changes that goes into CHANGELOG.md):

In AzureBlobStorage, updated to try native copy first and go to read & write on 'Unauthroized' error (In AzureBlobStorage, if storage accounts are different for source & destination we get 'Unauthorized' error). And fix applying "use_native_copy" when endpoint is defined in configuration.

Documentation entry for user-facing changes

• Documentation is written (mandatory for new features)

[clickhouse-gh]

Workflow [PR], commit [93d171b]

[SmitaRKulkarni]

After some manual tests I see its not possible to compare authentication methods in Azure Blob Storage especially for WorkloadIdentity (& ManagedIdenitty).
GetToken does not work and an equal comparison also does not work. There is a function to compare AccountInfo, but still does not check if its same account or not.

So I have updated the approach, Now we first try native copy & if we get unauthorized error we go for read & write. I have tested manually with WorkloadIdentity that native copy works.

[jkartseva]

This PR relaxes the condition under which native copy is performed, which seems Okay.

[jkartseva]

lgtm

[SmitaRKulkarni]

Made a small fix for applying setting "use_native_copy", (https://github.com/ClickHouse/ClickHouse/pull/87826/files#diff-efbc3c03efb87660e06a2c7d91d2de5a25ff91611d5f60167636a7e5d169bd9cR630-R634)

Previously the map contained url (as given in config) & settings. When reading it we use endpoint.storage_account_url to fetch settings. So now I updated it to store endpoint.storage_account_url by getting endpoint from config & settings. So in case endpoint is defined we will still be storing only storage_account_url & read using it as well

[jkartseva]

PTAL at tests in private: https://github.com/ClickHouse/clickhouse-private/pull/38961#issuecomment-3369805601

[jkartseva]

Let's publish the submodule fix as a separate PR?

[SmitaRKulkarni]

Moved submodule change to different PR : #88278

[SmitaRKulkarni]

Unrelated fails :
Stateless tests (amd_debug, sequential) - 03141_fetches_errors_stress
Bugfix validation (integration tests) - the bug couldn't be seen in integration test, so fix couldn't be verified
AST fuzzer (amd_debug) - Logical error: 'Block structure mismatch in function connect between RemovingSparseTransform and MergeTreeSink stream: different types: