Azure write

Human-authorized Azure write operations with named subscription plus explicit authorize write. Use when the human authorized the Azure change. Do not use for read-only inspection (azure-read) or when authorization is missing.