Provision Azure AI Document Intelligence (formerly Form Recognizer) with `disableLocalAuth: true`, custom subdomain (required for Entra ID), private endpoint to `privatelink.cognitiveservices.azure.com`. Use the **new** SDK packages (`azure-ai-documentintelligence`, `Azure.AI.DocumentIntelligence`, `@azure-rest/ai-document-intelligence`) against REST API `2024-11-30` (v4.0). The legacy `azure-ai-formrecognizer` packages are deprecated.
