[Hou (SciencePotato)]

Summary

• deploy a real nonproduction CYOT-CONSTO application and consto-epp-* Azure resource set with JavaScript on Flex Consumption FC1 in West US 2
• update the Cloud Shell walkthrough and every applicable Azure portal photo to use CYOT-CONSTO or the actual nonproduction consto-epp-* resource names
• remove black bars from harmless labels such as the application, directory, resource group, Function App, Application Insights, Log Analytics workspace, Key Vault, managed identity, hosting plan, storage account, and provider choices
• retain black bars only for sensitive identifiers and connection data: tenant/client/object/subscription/application IDs, instrumentation key, connection string, and Function endpoint
• keep secret values and certificate material out of every image; Key Vault photos show names/status only

Deployment verification

• the resource-group deployment completed successfully and created seven resources tagged managedBy=EPP-Setup
• the deployed plan is FC1 and the runtime is JavaScript
• the unauthenticated health request returned HTTP 401 as required by Easy Auth
• the app registration is CYOT-CONSTO; the resource group is consto-epp-rg-5a7680d1
• the full deployment summary remains in restricted local storage and is not committed

Photo review

• reviewed every documentation image, including registration, Cloud Shell, resource group, Authentication, monitoring, Logs, Key Vault, Security Store, sign-in monitoring, diagnostic settings, and both architecture diagrams
• updated nine existing PNG photos plus the three Cloud Shell illustrations
• replaced hidden provider choices with Telesign and Soprano and added the consto prefix / CYOT-CONSTO context
• visually inspected the final updated files; the nine changed PNGs contain no EXIF or ancillary metadata exposed by Pillow
• images unrelated to this deployment contain no removable identity/resource-name bars and remain unchanged

Documentation validation

• validated all 19 Markdown files and 513 local references
• parsed all SVG XML and all PNG headers/dimensions
• git diff --check passed

The visible names belong to a nonproduction walkthrough and are not credentials. No secrets, tokens, certificate material, connection strings, provider API keys, recipient data, or usable endpoint are included.

Documentation/images only: no scripts, runtime code, infrastructure templates, settings, dependencies, or provider behavior changed.