When I create a Bot Channels Registration service in Azure, and then create a Teams app that will use that, how is the Bot Channel Registration being informed what apps it should allow to go through?
It does not authenticate the MS Teams app. Any app can point to any Bot Channels Registration or Azure Bot, it's up to the bot backend to validate the source of the message if desired. Like using one of the links in the comments of the previous answer.