Create a client registration from AZURE_* environment variables and disable SSO cleanly when no registration is available. Add a docker_push.sh helper for building and publishing production images.