[Simon Gallagher (vinfnet)]

Add region selection to the confidential Azure Container Apps hello-world sample, keeping UAE North as the default and allowing explicit West Europe selection.

Changes

• Route -Location through regional profile discovery, quota checks, resource-group creation, ARM deployment and verification.
• Preserve strict confidential DC4 placement, single-node scaling, HTTPS verification and no regional or ordinary-compute fallback.
• Update the walkthrough with West Europe commands, verified deployment results and cleanup details.
• Keep the sibling Functions workflow unchanged.

Validation

• All 27 offline tests passed, including West Europe routing and mismatched-region rejection.
• Whitespace validation passed.
• Live West Europe ARM validation and what-if succeeded, followed by a successful deployment with explicit DC4 placement, a healthy running replica and HTTP 200 with expected page content.
• Test resources and their managed infrastructure group were deleted and verified absent.

Confidential Container Apps is a GA product; this change adds sample region selection. Availability, quota and capacity remain subscription/region dependent. Control-plane placement checks are not independent cryptographic hardware attestation.

Source

Submitted from vinfnet/confidential-computing:main, following vinfnet#32. Only seven Container Apps sample files differ from upstream; no AKS changes are included.