AZURE_CLIENT_SECRET and AZURE_FEDERATED_TOKEN_FILE presence checks in the Entra diagnostics path now read through the profile secret scope (Slack pattern) instead of raw os.environ.
Use azure-identity DefaultAzureCredential for keyless Foundry auth. Preserve refreshable callable credentials through OpenAI and Anthropic client paths. Add setup, doctor, auth status, docs, and tests for Entra auth. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Teknium