Query corrections

[JSvedberg85]

Some typos in the Resource Graph query code makes resources show up as non-compliant even though they should be compliant and vice versa.

It's regrading these two recommendations: "Enforce reasonably flat management group hierarchy with no more than three to four levels, ideally" Subscriptions in Corp and Online management groups in the Azure Landing Zones architectural guidance shows as non-complaint even though they are four levels which should be allowed according to the description.

"Ensure that IP address space isn't wasted, don't create unnecessarily large virtual networks (for example /16)" Virtual Networks with a /16 mask shows as compliant even though the description states /16 as not recommended.