Azure Assistant MCP

# Unencrypted storage accounts ```kql resources | where type =~ 'microsoft.storage/storageaccounts' | extend isEncrypted = tostring(properties.encryption.services.blob.enabled) | where isEncrypted != 'true' | project name, resourceGroup, location, subscriptionId, isEncrypted ```