An Azure Container App with built-in auth using a Microsoft Entra application secured with federated identity credentials (no secrets). All infrastructure is defined in Bicep and deployed with the Azure Developer CLI.