...
Application registrations are configured in Microsoft Entra ID within the same tenant as PartnerPortal., details here: Azure Deployment Guide
Sensitive configuration values are stored in Azure App Service environment variables. No connection strings or secrets are stored in Git repositories.