A concrete, answer-first field guide to the platforms and tools that make an enterprise Kubernetes migration to Azure AKS governed from day one: Terraform or Bicep, Azure Policy for AKS, Kyverno, OPA Gatekeeper, Flux v2, Argo CD, Velero, Azure Backup for AKS, Defender for Containers - plus where an internal developer platform like Qovery fits and what it explicitly does not replace.