Provision a production-leaning Azure Kubernetes Service cluster with Microsoft Entra integration + Azure RBAC, Azure CNI Overlay, OIDC issuer + Workload Identity, private API server, autoscaling system + user node pools, and the Container Insights / Azure Policy / Key Vault Secrets Provider / Image Cleaner add-ons.
