Add deployment scripts and configuration for Sovereign Cloud

[janegilring]

This pull request introduces a new automated lab deployment flow for Azure Sovereign Cloud MicroHack environments, focusing on per-participant resource group isolation and precise role-based access control (RBAC). The changes include new deployment scripts, infrastructure-as-code templates, and configuration files to streamline and secure lab provisioning, ensuring each participant receives the necessary permissions and resources.

Lab deployment automation and configuration:

• Added deploy-lab.ps1, a PowerShell script that orchestrates lab resource deployment at the subscription or resource group level, validates parameters, sets preferred locations, registers required resource providers, and assigns RBAC roles to participants.
• Introduced lab-defaults.json to define default lab parameters such as deployment type, number of labs per subscription, preferred Azure regions, and estimated daily costs.

RBAC and infrastructure provisioning:

• Added main.bicep to assign subscription-scoped RBAC roles (Security Reader, Resource Policy Contributor) to lab participants and invoke a module for resource-group-scoped RBAC, ensuring participants have appropriate permissions.
• Added rg-rbac.bicep module to assign resource-group-scoped roles (Key Vault Administrator, Storage Account Contributor) to participants, supplementing the Owner role already granted.

Resource provider registration:

• Added resource-providers.ps1, a script to register all required Azure resource providers for the Sovereign Cloud MicroHack, ensuring all necessary services are available before deployment.