How to provision a tenant's BYOKManual runbook for putting a tenant on their own Azure OpenAI account and keys