Replace skill instructions with scripts

We have several skills that describe narrow workflows with very well defined sets of steps. These are good candidates to have those steps moved into a bash/PowerShell script that performs the same actions, with the skill updated to use the script. This would make the execution of the workflow more deterministic as well as reduce token usage (as the agent will only see the final output of the script rather than the output of every intermediate step).

Here are the opportunities identified by Copilot:

### Highly Scriptable (concrete CLI runbooks, mostly mechanical)

| Skill | Key File(s) | What Could Be Scripted |
|---|---|---|
| azure-quotas | `SKILL.md:80-225` | Install extension → `az quota list` → match names → `az quota show` → `az quota usage show` → compare regions → `az quota update` → check status. Nearly a shell script already. |
| azure-storage | `SKILL.md:22-50` | List accounts → list containers → list blobs → download/upload. Fully mechanical CLI flow. |
| azure-deploy | `SKILL.md:57-70`, `references/recipes/` | Check plan → checklist → load recipe → RBAC check → execute deploy → post-deploy → verify → report. |
| azure-resource-lookup | `SKILL.md:49-109` | Check for MCP tool → generate ARG query → run `az graph query` → shape output. |

### Partially Scriptable (mechanical core, judgment at key points)

| Skill | Scriptable Parts | Judgment Needed For |
|---|---|---|
| azure-cost | Prereqs → azqr → discover → query costs → metrics → report | Scope, recommendation prioritization |
| azure-compliance | Scope → azqr → analyze → categorize | Remediation prioritization |
| airunway-aks-setup | Verify cluster → install controller → GPU → provider → deploy → summarize | Human confirmation each phase |
| azure-validate | Verify plan → run commands → build → verify RBAC → record proof | Fixing failures |
| azure-reliability | ARG query → classify → load checks → apply zone redundancy → verify | Consent, migration timing |
| entra-app-registration | Register app → auth → permissions → credential → OAuth | App type, redirect URIs |
| entra-agent-id | Blueprint → principal → agent identities → credentials → token exchange | Tenant/permissions |
| azure-upgrade | Source/target → readiness → collect settings → upgrade → validate | Confirmation, choices |
| azure-compute | VM troubleshooter, CRG, EMM workflows have CLI command sequences | Recommender is judgment-heavy |
| azure-hosted-copilot-sdk | Scan → route → `azd init` → config → prepare → validate → deploy | Model/auth choice |
| azure-kusto | Discover clusters → schema → KQL → analyze | Query authoring |
| azure-diagnostics | Health → logs → metrics → changes | Root-cause diagnosis |
| azure-rbac | Generate CLI commands + Bicep | Choosing minimal role |
| azure-resource-visualizer | List → analyze → map → Mermaid + markdown | Relationship inference |
| azure-cloud-migrate | Output dir → assess → migrate → hand off | Code conversion |