Add connectivity rule support for azure

[david049]

What was changed

adds connectivity rule support for azure, bumps to latest sdk

Why?

Checklist

1. Closes

2. How was this tested:

local tested
3. Any docs updates needed?

---

Note

Medium Risk
Touches cloud connectivity creation paths and a major SDK bump with broad mock/API surface changes; misconfigured Azure/AWS/GCP flags could create invalid rules, but scope is limited to CLI connectivity commands.

Overview
Adds Azure private connectivity to temporal cloud connectivity private create via a new --azure-pe-resource-id flag, and passes that ARM resource ID through to PrivateConnectivityRule when creating rules.

Private create is no longer AWS-only: --connection-id is optional (still used for AWS/GCP), while --region remains required. Help text and commands.yml now document AWS, GCP, and Azure flag combinations.

Bumps go.temporal.io/cloud-sdk to v0.15.0 (and Go 1.26.4), which regenerates the cloud service mock and updates a protoutils golden fixture for new projectAccesses fields.

^{Reviewed by Cursor Bugbot for commit 96b608d. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{Reviewed by Cursor Bugbot for commit 8d61548. Configure here.}

[khisakuni]

Looks like there's a test that asserts that the connection ID is required, but otherwise LGTM!