Public network access is disabled on the managed environment and we need to route traffic via a Private Endpoint, can the existing Bicep deployment be updated to support VNet-integrated deployment of the AzUrlShortener Container App, including required Private Endpoint and Private DNS configuration?