Un-deploy: reverse a mistaken template provision

Reverse a mistaken template provision in-app — the template itself stays intact.

• Draft applications: Removed immediately
• Untouched deployments: Removed immediately, no re-approval needed
• Modified deployments: Sent to your Approver as a "no firewall change" acknowledgment
• Shared IP groups preserved — only what belonged to the un-deployed application is removed
• Own audit entry logged as "Un-Deployed" with reason, who, and when

‍