fix: Add missing dns zones in relevant policy assignment and adjust workflow permissions

[oZakari]

Overview/Summary

This pull request includes several updates to GitHub workflows and a significant change to a Bicep module template. The updates to the workflows involve setting permissions for reading contents, while the Bicep module template changes involve updating and adding various private DNS zone IDs.

Workflow Updates:

• Added permissions: contents: read to the following workflow files to ensure they have the necessary read permissions:
  • .github/workflows/bicep-build-to-validate.yml
  • .github/workflows/gh-ado-sync.yml
  • .github/workflows/release-tests.yml
  • .github/workflows/scheduled-bicep-build.yml

Bicep Module Template Changes:

• Updated infra-as-code/bicep/modules/policy/assignments/lib/policy_assignments/policy_assignment_es_deploy_private_dns_zones.tmpl.json to correct and add various private DNS zone IDs, ensuring accurate resource ID references and expanding the list of supported DNS zones.

Related Issues/Work Items

Fixes #897

This PR fixes/adds/changes/removes

1. Adds all missing dns zones from policy set definition file
2. Adds top level permissions for workflows

Breaking Changes

None

Testing Evidence

Replace this with any testing evidence to show that your Pull Request works/fixes as described and planned (include screenshots, if appropriate).

As part of this Pull Request I have

• Read the Contribution Guide and ensured this PR is compliant with the guide
• Ensured the resource API versions in .bicep file/s I am adding/editing are using the latest API version possible
• Checked for duplicate Pull Requests
• Associated it with relevant GitHub Issues
• (ALZ Bicep Core Team Only) Associated it with relevant ADO Items
• Ensured my code/branch is up-to-date with the latest changes in the main branch
• Performed testing and provided evidence.
• Updated one or more of the following tests (if required)
  • Unit
  • Linting
  • E2E (End-To-End)
  • ValidateAzCloud (Base validation in Azure Cloud)
  • ValidateMcCloud (Base validation in Azure China Cloud)
• Updated relevant and associated documentation (e.g. Contribution Guide, Module READMEs, Wiki Docs etc.)
• If relevant, created or updated Code Tours here

[oZakari]

/azp run validateazcloud

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[oZakari]

/azp run validateazcloud

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[jtracey93]

nice @oZakari, does this var also need updating? https://github.com/Azure/ALZ-Bicep/blob/main/infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep#L535-L589