Embedding threat modelling and M&A cyber due diligence into cloud migration — secure architecture patterns for risk-managed Azure adoption programmes.