Azure Bicep/ARM templates for enterprise landing zones with governance, networking, and identity management.