Improve end-to-end tutorial GitHub environment setup

[placerda]

Summary

• explain why GitHub Actions needs its own Azure identity
• add a table mapping app registration, variables, federated credentials, and role assignments to their purpose
• explain each setup step before showing the PowerShell commands

Testing

• docs-only change; not run