[Jan Egil Ring (janegilring)]

This pull request introduces automated, subscription-wide configuration and verification of Defender for Servers Plan 2 (P2) and Endpoint protection for hosted lab environments, along with comprehensive documentation, test coverage, and integration into the shared deployment workflow. The changes ensure that every event subscription is properly secured and that organizers and participants are clearly guided on configuration, costs, and readiness validation.

Defender for Servers automation and integration:

• Added a new script hosted-defender.ps1 implementing Initialize-MhhHostedDefender, which enables and verifies Defender for Servers P2 and Endpoint protection for a given subscription, preserving existing extension/enforcement settings and retrying verification up to 12 times.
• Integrated Initialize-MhhHostedDefender into shared-deploy-lab.ps1, ensuring Defender is configured after tag-policy setup and before LocalBox deployment for hosted environments. [1] [2] [3]

Documentation updates:

• Updated cost planning and event documentation to clarify that Defender for Servers P2 and Endpoint protection are enabled automatically for hosted events, with costs and configuration responsibilities clearly described. [1] [2]
• Expanded readiness and manual preparation guides to include Defender for Servers P2/Endpoint configuration, CLI verification steps, and organizer/participant responsibilities. [1] [2]

Test coverage:

• Added comprehensive Pester tests for hosted-defender.ps1, covering correct configuration, error handling, idempotency, and integration with the deployment workflow.