Enable Management storage account and ACR access from private runners

[ashis-kar91]

Description

As part of issue #4463 and pull request #4495, we have enabled support for configuring a private agent subnet ID to enable virtual network (vnet) exceptions for accessing Core Key Vault from Github runners.
If private agent subnet ID is not provided in the config, it defaults to just in time public access of the key vault during deployment.

We need to add similar implementation with private agent subnet vnet exception for Management Storage account and ACR to make the private resource access behavior consistent.

Acceptance criteria

• Should be able to deploy TRE from private runners using CICD
• Should be able to deploy TRE from local dev machine
• Public access to the Storage account and ACR should be in disabled state at the end of deployment