Add Azure Local provider handoff

[VirtuArchitect]

Summary

• add a safe Azure Local provider handoff execution contract
• validate required Azure Local provider configuration before marking a handoff ready
• generate the Azure Local artifact bundle and azure-local-execution-manifest.json evidence file
• emit structured deploy-azure-local job stage events
• document the handoff boundary and field-installation requirements

Verification

• python -m pytest tests/test_store_jobs.py tests/test_artifacts.py tests/test_api.py::test_approval_can_be_approved_and_run -q
• python -m pytest -q
• python -m pip_audit --skip-editable
• python -m bandit -r src --severity-level medium
• docker compose config --quiet
• docker build -t strataone-api:phase1 .
• docker run --rm -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy:0.74.0 image --scanners vuln --ignore-unfixed --severity HIGH,CRITICAL --exit-code 1 strataone-api:phase1
• git diff --check

Smoke Test

• configured the azure-local provider via API
• requested deploy-azure-local
• approved and ran the job
• confirmed the job succeeded with ready-for-provider-handoff
• confirmed azure-local-execution-manifest.json was created

Security Notes

• no new runtime dependencies
• no live Azure mutation is performed in this slice
• credential values are not stored; the handoff stores only credential_ref metadata