remediation

Azure Policy remediation: fix drift without breaking production

A production runbook for running Azure Policy remediation with impact preview, managed identity checks, controlled batches, exemptions, logs and rollback.