Azure WAF Compliance with MCP-Driven SRE Agent