Azure Monitor logging connectivity probe

Token-only health check for the Azure Monitor (Log Analytics) log-shipping integration. Verifies the config fields are set and that managed identity can acquire a token for https://monitor.azure.com/.default. Does NOT perform a live upload, so no test rows are written. A green result does not guarantee ingestion — the Monitoring Metrics Publisher role and DCR/stream validity are only enforced at real ingestion time.