A platform wants reproducible ML workspace infrastructure deployed by a trusted GitHub workflow without storing long-lived Azure secrets. Which combination should it evaluate?

1. A model metric as the authentication credential
2. Manual portal changes and a shared administrator password
3. A new notebook title for each environment
4. Infrastructure as code and supported workload identity federation