Build and test a secure Azure hub-and-spoke network with VNet peering, Azure Firewall Basic, user-defined routes, and private Ubuntu VMs—then clean up every lab resource.