A data center engineer is deploying a new UCS X-Series compute node managed through Intersight Managed Mode (IMM). The engineer wants to ensure that whenever a server profile is associated with a node, the node's endpoint firmware (BIOS, CIMC, adapters, storage controllers) is automatically brought to a validated bundle version as part of the association. Which construct must the engineer configure and reference so that firmware is enforced during server profile association in IMM?