Update blog 5.6: complete App Service settings reference and workflow fixes

[workcontrolgit]

Summary

Cross-referenced live Azure App Service settings against the deploy workflows and updated blog 5.6:

Workflow snippet fixes:

• Updated API settings snippet to use env: block (fixes $9 bash variable stripping bug)
• Updated IDS settings snippet to use env: block and include all 4 connection strings
• Added IDENTITY_ADMIN_URL and ANGULAR_APP_URL to the GitHub Secrets list in Step 1

New: Complete App Service Settings Reference section listing every setting for all three apps:

• API: 12 settings — source (Secret vs hardcoded) documented for each
• IdentityServer STS: 13 settings
• IdentityServer Admin: 13 settings
• Note about stale settings (CorsOrigins, ASPNETCORE_DETAILEDERRORS) that exist in Azure but are not managed by the workflow

Discrepancies found in Azure vs workflow:

• CorsOrigins on API — stale setting from earlier deployment, workflow now uses Cors__AllowedOrigins__0/1
• ASPNETCORE_DETAILEDERRORS and ASPNETCORE_SHUTDOWNTIMEOUTSECONDS on STS — manually set, not in workflow
• ASPNETCORE_DETAILEDERRORS and WEBSITE_HTTPLOGGING_RETENTION_DAYS on Admin — manually set