Your team manages Azure infrastructure using Bicep files stored in a Git repository, deployed through an Azure Pipeline. Recent production incidents were caused by pipeline runs that unexpectedly deleted or modified resources when engineers merged Bicep changes. Before any changes are applied to the production resource group, you need the pipeline to surface exactly which resources will be created, modified, or deleted, and let a reviewer inspect that output. Which approach should you implement?