Feature/performanceimprovement1

[Bionic711]

Summary

• Hardened model endpoint cloud handling so managed identity and other non-editable cloud paths derive management_cloud from AZURE_ENVIRONMENT, including custom-cloud defaults.
• Migrated route registration to Blueprint-backed route groups with explicit Blueprint-level authentication policies.
• Added route policy guardrails and functional coverage to verify Blueprint registration, unauthenticated access expectations, and route-test completeness.
• Fixed stale Admin Settings update-banner logic so older cached versions are not shown as available updates.
• Added deployment and infrastructure updates for native Python App Service support, resource locks, Redis/auth improvements, and updated Bicep validation assets.
• Added or updated feature/fix documentation, release notes, and functional tests for route security, model endpoint cloud normalization, update banner behavior, Redis, Snowflake, Azure Billing charts, and guardrail tooling.

Validation

• Ran Python compile checks for changed Python files.
• Ran Swagger route validation for changed route files.
• Ran route policy functional tests.
• Ran changed functional tests directly.
• Ran XSS and broken-access-control guardrail checks.
• Compiled deployers/bicep/main.bicep successfully with no diagnostics.
• Ran git diff --check.

Supersedes #902