Review update (September 25, 2026): The reviewed provider pins are historical evidence, not an evergreen supported toolchain. Before a new deployment, review Key Vault API retirement and AzureRM major-version migration notes. Keep state protections โฆ