[Auto] AI Gallery Standard Validation

# AI Gallery Standard Validation: NON-CONFORMING

Severity: High

Please review the warnings below. If your template is already published, it may be subject to removal from a collection.
Head to this link for more information: [template-lifecycle](https://aka.ms/ai-gallery/template-lifecycle)

## Repository Management:
- [x] README.md File.
- [x] LICENSE.md File.
- [x] SECURITY.md File.
- [x] CODE_OF_CONDUCT.md File.
- [x] CONTRIBUTING.md File.
- [x] ISSUE_TEMPLATE.md File.
- [x] Topics on repo contains ['azd-templates', 'ai-azd-templates'].

## Source code structure and conventions:
- [x] azure-dev.yml File.
- [x] azure.yml File.
- [x] infra Folder.
- [x] .devcontainer Folder.

## Functional Requirements:
- [ ] :x: azd up. [How to fix?]

Details

New environment 'ai37-10333r51' created and set as default.
Initialize bicep provider

Packaging services (azd package)

(✓) Done: Packaging service api_and_frontend
- No artifacts were found


Provisioning Azure resources (azd provision)
Provisioning Azure resources can take some time.

Initialize bicep provider
Reading subscription and location from environment...
Subscription: Azure SDK Test Resources - AI Apps (90b334cb-854f-4207-a89c-cf44ab8673fe)
Location: Sweden Central

Creating a deployment plan
Comparing deployment state
Creating/Updating resources
You can view detailed progress in the Azure Portal:
https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/%2Fsubscriptions%2F90b334cb-854f-4207-a89c-cf44ab8673fe%2Fproviders%2FMicrosoft.Resources%2Fdeployments%2Fai37-10333r51-1772083356

(✓) Done: Resource group: rg-ai37-10333r51 (5.588s)
(✓) Done: Log Analytics workspace: log-ob6dljoiaa5eq (27.245s)
(✓) Done: Storage account: stob6dljoiaa5eq (29.832s)
(✓) Done: Application Insights: appi-ob6dljoiaa5eq (3.833s)
(✓) Done: Foundry: aoai-ob6dljoiaa5eq (32.33s)
(✓) Done: Azure AI Services Model Deployment: aoai-ob6dljoiaa5eq/gpt-5-mini (35.456s)
(✓) Done: Foundry project: aoai-ob6dljoiaa5eq/proj-ob6dljoiaa5eq (13.279s)
(✓) Done: Container Registry: crob6dljoiaa5eq (18.488s)
(✓) Done: Container Apps Environment: containerapps-env-ob6dljoiaa5eq (57.253s)
(✓) Done: Container App: ca-api-ob6dljoiaa5eq (8m34.072s)

ERROR: error executing step command 'provision': deployment failed: error deploying infrastructure: deploying to subscription:

Deployment Error Details:
UnmatchedPrincipalType: The PrincipalId 'deaf25ccdfa94a28a6a14b9247afdac4' has type 'ServicePrincipal' , which is different from specified PrinciaplType 'User'.
UnmatchedPrincipalType: The PrincipalId 'deaf25ccdfa94a28a6a14b9247afdac4' has type 'ServicePrincipal' , which is different from specified PrinciaplType 'User'.
UnmatchedPrincipalType: The PrincipalId 'deaf25ccdfa94a28a6a14b9247afdac4' has type 'ServicePrincipal' , which is different from specified PrinciaplType 'User'.

TraceID: 137e872b101f550b3a223f8eed335f8f

- [x] azd down.

## Security Requirements:
- [x] Security scan is not performed.

Start with azure-dev.yml, azure.yml, and the infra folder, then run azd up to reproduce the provisioning failure. Trace the deployment configuration associated with the reported UnmatchedPrincipalType error, where a service principal is declared as a user. Done means azd up provisions successfully without that error.

Written by the indexing model from the issue text.