Hi - I am trying to deploy Fara 7B in foundry and running into the following error -

Instance status:
SystemSetup: Succeeded
UserContainerImagePull: InProgress
ModelDownload: InProgress
UserContainerStart: Waiting

Container events (repeating):

• DownloadFailed / Warning / 2025-12-22T23:40:02Z: Model download failed, retrying. See storage-initializer log.
• ImagePullFailed / Warning / 2025-12-22T23:40:04Z: Image pull failed, retrying. See image-fetcher log.
• Downloading / Normal / e.g., 2025-12-22T23:40:14Z: Start downloading models.
• Pulling / Normal / e.g., 2025-12-22T23:40:32Z: Start pulling container image.

Container logs (trimmed):

+ '[' '!' -S /run/containerd/containerd.sock ']'
+ ./mir-imagefetcher
{"level":"INFO","msg":"Use environment: AzurePublicCloud"}
{"level":"INFO","msg":"Parse image name","ImageUrl":"<ACR_URL>/fara-7b-fmi/...@sha256:<digest>"}
{"level":"INFO","msg":"Found user ACR image","IdentityType":"XDS"}
{"level":"WARN","msg":"Http status code of response is not 2xx","HTTP status code":401}
{"level":"WARN","msg":"exchange refresh token return non-success status: 401, details: {\"errors\":[{\"code\":\"UNAUTHORIZED\",\"message\":\"token validation failed: the received access token has unknown tenantId \"<TENANT_ID_REDACTED>\"\"}]}"}
{"level":"ERROR","msg":"exchange refresh token failed","error":"401 UNAUTHORIZED ... unknown tenantId <TENANT_ID_REDACTED>"}

Summary: container image pulls keep failing because the registry rejects the managed identity token (unknown tenant ID).
Can you help?