Embedding Enforcement Hooks in CI/CDStep-by-step enforcement pattern with Azure Policy and DeployIfNotExists to auto-provision secure network controls.