feat: Implement support for a new Azure Blob connector

Issue

- #1957

Summary

- Expanded the Azurite seed script to cover multi-container seeding,
  Office document formats (docx, xlsx, pptx, csv, html), and an
  in-place `--update` mode for re-ingestion / change-detection testing.
- Standardized bucket/container restriction label copy across S3, IBM
  COS, and Azure Blob settings forms.
- Improved `.env.example` Azurite config docs and removed redundant
  echo output from the `azurite-up` Makefile target.

Developer Tooling — `scripts/connectors/azure/seed_azurite.py`

- Split single `openrag-test` container into two: `openrag-test-1`
  (plain text, markdown, PDF) and `openrag-test-2` (Office/web formats).
- Added pure-Python OOXML builders (`_make_docx`, `_make_xlsx`,
  `_make_pptx`) using `zipfile` — no external dependencies.
- Added `BLOBS_1_V2` fixture set (VERSION_2 tagged content) to exercise
  re-ingestion and change-detection flows.
- Added `--update` CLI flag to overwrite specific blobs in place without
  recreating containers.
- Refactored seeding logic into `_seed_container` and `_update_blobs`
  helpers.

Configuration — `.env.example` / `Makefile`

- Expanded Azurite account-key mode docs with explicit per-variable
  format for both host-side and in-compose backends.
- Removed redundant configuration echo lines from `azurite-up` target
  (now documented in `.env.example`).

Frontend — Connector Settings Forms

- Renamed label "Restrict to Specific Buckets/Containers" →
  "Restrict Ingestion to Buckets/Containers" across S3, IBM COS,
  and Azure Blob settings forms.
- Shortened helper text to "(optional)" (removed the redundant
  "leave all unchecked" parenthetical).

Author: mpawlow

.env.example

@@ -180,9 +180,14 @@ AWS_SECRET_ACCESS_KEY=
 # AZURE_STORAGE_CONNECTION_STRING=
 #
 # Account-key mode (set account name + key; endpoint optional):
-#   - Azurite (host-side backend):  endpoint http://127.0.0.1:10000/devstoreaccount1
-#   - Azurite (in-compose backend): endpoint http://azurite:10000/devstoreaccount1
-#     (use the well-known Azurite key: Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KnufldCDs==)
+#   - Azurite (host-side backend):
+#     - AZURE_STORAGE_ACCOUNT_NAME=devstoreaccount1
+#     - AZURE_STORAGE_ACCOUNT_KEY=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==
+#     - AZURE_STORAGE_ENDPOINT=http://127.0.0.1:10000/devstoreaccount1
+#   - Azurite (in-compose backend):
+#     - AZURE_STORAGE_ACCOUNT_NAME=devstoreaccount1
+#     - AZURE_STORAGE_ACCOUNT_KEY=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==
+#     - AZURE_STORAGE_ENDPOINT=http://azurite:10000/devstoreaccount1
 # AZURE_STORAGE_ACCOUNT_NAME=
 # AZURE_STORAGE_ACCOUNT_KEY=
 # AZURE_STORAGE_ENDPOINT=

Makefile

@@ -671,12 +671,6 @@ azurite-up: ## Start Azurite (local Azure Blob emulator) for connector testing
 	@echo "$(YELLOW)Starting Azurite (Azure Blob emulator)...$(NC)"
 	$(COMPOSE_CMD) --profile azurite up -d azurite
 	@echo "$(PURPLE)Azurite started on http://localhost:10000 (account: devstoreaccount1).$(NC)"
-	@echo "  $(CYAN)Host-side backend: AZURE_STORAGE_CONNECTION_STRING=\"UseDevelopmentStorage=true\"$(NC)"
-	@echo "  $(CYAN)In-compose backend: use account name + key + endpoint mode:$(NC)"
-	@echo "  $(CYAN)  AZURE_STORAGE_ACCOUNT_NAME=devstoreaccount1$(NC)"
-	@echo "  $(CYAN)  AZURE_STORAGE_ACCOUNT_KEY=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KnufldCDs==  # well-known Azurite key$(NC)"
-	@echo "  $(CYAN)  AZURE_STORAGE_ENDPOINT=http://azurite:10000/devstoreaccount1$(NC)"
-	@echo "  $(CYAN)Set OPENRAG_DEV_AZURE_BLOB=true in .env to enable the connector without IBM_AUTH_ENABLED$(NC)"
 
 azurite-down: ## Stop Azurite emulator
 	@echo "$(YELLOW)Stopping Azurite...$(NC)"

frontend/app/settings/_components/s3-settings-form.tsx

@@ -170,9 +170,9 @@ export function S3SettingsForm({
         <div className="space-y-2">
           <div className="flex items-center justify-between">
             <Label className="text-sm font-medium">
-              Restrict to Specific Buckets
+              Restrict Ingestion to Buckets
               <span className="ml-1 text-muted-foreground font-normal">
-                (optional — leave all unchecked to allow all buckets)
+                (optional)
               </span>
             </Label>
             {buckets.length > 1 && (

frontend/enhancements/connectors/azure-blob/settings-form.tsx

@@ -217,9 +217,9 @@ export function AzureBlobSettingsForm({
         <div className="space-y-2">
           <div className="flex items-center justify-between">
             <Label className="text-sm font-medium">
-              Restrict to Specific Containers
+              Restrict Ingestion to Containers
               <span className="ml-1 text-muted-foreground font-normal">
-                (optional — leave all unchecked to allow all containers)
+                (optional)
               </span>
             </Label>
             {containers.length > 1 && (

frontend/enhancements/connectors/ibm-cos/settings-form.tsx

@@ -275,9 +275,9 @@ export function IBMCOSSettingsForm({
         <div className="space-y-2">
           <div className="flex items-center justify-between">
             <Label className="text-sm font-medium">
-              Restrict to Specific Buckets
+              Restrict Ingestion to Buckets
               <span className="ml-1 text-muted-foreground font-normal">
-                (optional — leave all unchecked to allow all buckets)
+                (optional)
               </span>
             </Label>
             {buckets.length > 1 && (