time-track-demo

harden deploy script: httpsOnly, defaultAction Deny, inline MI+deployment auth

UI: replace billable dropdown with toggle switch

simplify: replace service principal + cert with managed identity

deploy.ps1: explicit shared-key-access=false + fix RBAC wait

fix: use identity-based storage connections for Functions deployment