A retail company runs several microservices across Azure App Service and Azure Kubernetes Service. Development teams currently store configuration settings and feature toggles in each application's local files, requiring redeployments to change any value. The architect must recommend a solution that centralizes configuration, allows dynamic feature-flag changes without redeployment, supports point-in-time configuration snapshots for rollback, and integrates securely with Key Vault for secrets. Which Azure service should the architect recommend?