AKS Pods fail with image-pull authorization errors against a private registry. What should be checked first?

1. The cluster's image-pull identity, registry permissions, and network reachability
2. The application's output token limit
3. The number of business users
4. A storage blob's TTL