Bicep in CI: preview, then apply Same az commands as Chapters 3–4 — now on a GitHub Actions runner on pull_request on merge to main 1. Pull request Open a PR with a Bicep change triggers Actions 2. what-if az deployment group what-if preview only 3. Read the diff Humans review + / ~ lines judgement stays human 4. create az deployment group create apply to Azure CI automates the preview; a green check is not a skip-reading pass Teardown stays explicit — this flow never deletes resources