Add Azure Private Endpoint and Private DNS support

[hectorvent]

Title

Add Azure Private Endpoint and Private DNS support

Description

Implement Azure Private Endpoint and Private DNS Zone support inside floci-az.

The purpose is to complete the Security & Governance parity set and let Terraform / SDK clients that declare Private Link + private DNS plumbing apply cleanly against the emulator. There is no real network isolation to enforce locally — this is mostly ARM metadata plus synthesized private IPs and DNS records.

ARM providers: Microsoft.Network/privateEndpoints, Microsoft.Network/privateDnsZones (+ virtualNetworkLinks, A/CNAME record sets), and privateLinkServices.

Suggested capabilities:

• Private endpoint CRUD with privateLinkServiceConnections + synthesized NIC/private IP
• Private DNS zone CRUD + virtual network links
• Private DNS record sets (A / CNAME / SOA)
• privateDnsZoneGroups on the endpoint

floci-az notes: extend the existing network / ArmHandler Microsoft.Network stubs; low complexity, mostly metadata. Pairs naturally with the Azure DNS issue.

Official Documentation

• https://learn.microsoft.com/en-us/azure/private-link/
• https://learn.microsoft.com/en-us/azure/dns/private-dns-overview
• https://learn.microsoft.com/en-us/rest/api/virtualnetwork/private-endpoints

Azure SDK for Java

• Management: com.azure.resourcemanager:azure-resourcemanager-network — https://learn.microsoft.com/en-us/java/api/overview/azure/resourcemanager-network-readme

Azure REST API Specs

• https://github.com/Azure/azure-rest-api-specs/tree/main/specification/network
• https://github.com/Azure/azure-rest-api-specs/tree/main/specification/privatedns