A Secure Azure Landing Zone for AI Workloads

Before the first model call, I set up the foundation: Microsoft Foundry sits behind private endpoints with the three private DNS zones, managed identity replaces API keys, and APIM acts as the AI gate