A feature is deployed but must remain hidden until a controlled business rollout. The team wants to enable it without rebuilding the application. Which approach fits?

1. Remove all authorization checks while the feature is hidden
2. A feature flag using Azure App Configuration with application integration
3. A forced redeployment for every user's click
4. A branch name used as the only runtime switch