🐛 azure: accept TLS 1.3 where Azure allows it (#3506)