Harden security on Container Registries (ACR)

[emirgens]

Limit permission for app.reg, managed identities to only have permission to the object itself, not the resource group.

• [x] radixdev
• [x] radix-cr-cicd-dev
• [x] radix-github-workflows-dev
• [x] ar-radix-github-workflows-1-dev