Azure Landing Zone + Migration

Subscription scaffolding, networking, IAM, and 'lift & shift' for one workload.